DependencyTrack / DependencyTrack/dependency-track

Repository Error 404 Notification sent for each Maven repository if component PURL not found

Open
#2,100 0 comments 1 reaction 0 assignees View on GitHub
question
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

DT 4.6.2.
By adding a java component with PURL "pkg:maven/androidx.activity/activity@1.0.0" and during the analysis,
DT send SYSTEM:REPOSITORY Notification for each repository where it is not found (4 of 5 for pkg:maven):
E.g.
"An error occurred while communicating with an MAVEN repository. URL:
https://repo.clojars.org/androidx/activity/activity/maven-metadata.xml HTTP Status:
404. Check log for details."

DT 4.5. did not have this behavior. Is it a feature at 4.6.2?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.