dependency-check / dependency-check/DependencyCheck
Execution using Remote project-suppression should fail with 404
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
**Is your feature request related to a problem? Please describe.**
I'm actually using a remote project-suppression.xml file. I use the -DsuppressionFiles=http://myserver.com/project-suppression.xml
If I get a 404 instead of the good content, the execution doesn't fail and the analysis doesn't take care of the suppressions
**Describe the solution you'd like**
When using a remote file, if anything but a 200 occurs, let the execution fail.
**Describe alternatives you've considered**
I have to manually use wget to make the test on my own and fail the pipeline if a 404 occurs
**Additional context**
here is the maven command line I use
`mvn org.owasp:dependency-check-maven:7.2.1:aggregate $MAVEN_OPTIONS -DfailBuildOnAnyVulnerability=true -Dformats=HTML,JUNIT,JSON -DsuppressionFiles=project-suppression.xml,https://git.toto.fr/api/v4/projects/5022/repository/files/project-suppression.xml/raw?ref=master&private_token=WRONG_TOKEN_VALUE -DdataDirectory=./dependency-check-data`
Contributor guide
Assessment
This issue has not been assessed yet.