dependency-check / dependency-check/DependencyCheck
Support "NVD start year" for CLI
Open
enhancement
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
The Maven plugin supports `cveStartYear` to limit the scope of potentially fetched CVE entries. The CLI has no such feature.
**Describe the solution you'd like**
Add `nvdStartYear` for the CLI.
`bin/dependency-check.sh --updateonly --nvdDatafeed=https://dependency-check.github.io/DependencyCheck_Builder/nvd_cache/nvdcve-{0}.json.gz --nvdStartYear=2018` should skip all `.json.gz` files from before 2018.
**Describe alternatives you've considered**
To my knowledge, there are none.
**Additional context**
n/a
Contributor guide
Assessment
This issue has not been assessed yet.