dependency-check / dependency-check/DependencyCheck

Execution using Remote project-suppression should fail with 404

Open
#4,938 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

**Is your feature request related to a problem? Please describe.**
I'm actually using a remote project-suppression.xml file. I use the -DsuppressionFiles=http://myserver.com/project-suppression.xml
If I get a 404 instead of the good content, the execution doesn't fail and the analysis doesn't take care of the suppressions

**Describe the solution you'd like**
When using a remote file, if anything but a 200 occurs, let the execution fail.

**Describe alternatives you've considered**
I have to manually use wget to make the test on my own and fail the pipeline if a 404 occurs

**Additional context**
here is the maven command line I use
`mvn org.owasp:dependency-check-maven:7.2.1:aggregate $MAVEN_OPTIONS -DfailBuildOnAnyVulnerability=true -Dformats=HTML,JUNIT,JSON -DsuppressionFiles=project-suppression.xml,https://git.toto.fr/api/v4/projects/5022/repository/files/project-suppression.xml/raw?ref=master&private_token=WRONG_TOKEN_VALUE -DdataDirectory=./dependency-check-data`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.