gchq / gchq/sleeper

Re-enable dependency check plugin

Open
#6,481 2 comments 0 reactions 0 assignees View on GitHub
on-hold
Dominant language
Java
Stars
107
Forks
29
Avg merge
19h 46m
Merged PRs (30d)
141

Description

We disabled the dependency check plugin in the following issue:
- https://github.com/gchq/sleeper/issues/6479

The NVD API was returning 429 Too Many Requests errors, even when there was only one process calling the API.

We'd like to re-enable the plugin when we can.

Also fixing the vunerabilities detected since the plugin was turned off.

Contributor guide

Open the contributing guide

Research direction

Read issue 6479 first to understand why the dependency check plugin was disabled, then locate the plugin configuration and review the NVD API 429 errors. Done means the plugin is re-enabled and the vulnerabilities detected while it was disabled are fixed.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.