Hello,

      Since my last update of the dependency-check cli, i can't update the NVD database.

      09:43:46,611 |-INFO in ch.qos.logback.classic.LoggerContext[dependency-check] - Could NOT find resource [logback-test.xml]
      09:43:46,612 |-INFO in ch.qos.logback.classic.LoggerContext[dependency-check] - Found resource [logback.xml] at [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.0.jar!/logback.xml]
      09:43:46,612 |-WARN in ch.qos.logback.classic.LoggerContext[dependency-check] - Resource [logback.xml] occurs multiple times on the classpath.
      09:43:46,612 |-WARN in ch.qos.logback.classic.LoggerContext[dependency-check] - Resource [logback.xml] occurs at [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.1.jar!/logback.xml]
      09:43:46,612 |-WARN in ch.qos.logback.classic.LoggerContext[dependency-check] - Resource [logback.xml] occurs at [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.0.jar!/logback.xml]
      09:43:46,621 |-INFO in ch.qos.logback.core.joran.spi.ConfigurationWatchList@49fc609f - URL [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.0.jar!/logback.xml] is not of type file
      09:43:46,667 |-INFO in ch.qos.logback.classic.joran.action.ConfigurationAction - debug attribute not set
      09:43:46,670 |-INFO in ch.qos.logback.classic.joran.action.ContextNameAction - Setting logger context name as [dependency-check]
      09:43:46,670 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [ch.qos.logback.core.ConsoleAppender]
      09:43:46,672 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [console]
      09:43:46,681 |-INFO in ch.qos.logback.core.joran.action.NestedComplexPropertyIA - Assuming default type [ch.qos.logback.classic.encoder.PatternLayoutEncoder] for [encoder] property
      09:43:46,694 |-INFO in ch.qos.logback.classic.joran.action.LoggerAction - Setting level of logger [org.apache.commons.jcs] to ERROR
      09:43:46,694 |-INFO in ch.qos.logback.classic.joran.action.LoggerAction - Setting level of logger [org.apache.hc] to ERROR
      09:43:46,694 |-INFO in ch.qos.logback.classic.joran.action.RootLoggerAction - Setting level of ROOT logger to INFO
      09:43:46,694 |-INFO in ch.qos.logback.core.joran.action.AppenderRefAction - Attaching appender named [console] to Logger[ROOT]
      09:43:46,695 |-INFO in ch.qos.logback.classic.joran.action.ConfigurationAction - End of configuration.
      09:43:46,695 |-INFO in ch.qos.logback.classic.joran.JoranConfigurator@cd2dae5 - Registering current configuration as safe fallback point
      
      [WARN] Explicitly loaded driver org.h2.Driver from classpath; if JDBCv4 service loading is supported by the driver you should remove the dbDriver configuration
      [INFO] Checking for updates
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time
      [WARN] NVD API request failures are occurring; retrying request for the 5 time
      [WARN] NVD API request failures are occurring; retrying request for the 6 time
      [WARN] NVD API request failures are occurring; retrying request for the 7 time
      [WARN] NVD API request failures are occurring; retrying request for the 8 time
      [WARN] NVD API request failures are occurring; retrying request for the 9 time
      [WARN] NVD API request failures are occurring; retrying request for the 10 time
      [WARN] NVD API request failures are occurring; retrying request for the 11 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time
      [WARN] NVD API request failures are occurring; retrying request for the 5 time
      [WARN] NVD API request failures are occurring; retrying request for the 6 time
      [WARN] NVD API request failures are occurring; retrying request for the 7 time
      [WARN] NVD API request failures are occurring; retrying request for the 8 time
      [WARN] NVD API request failures are occurring; retrying request for the 9 time
      [WARN] NVD API request failures are occurring; retrying request for the 10 time
      [WARN] NVD API request failures are occurring; retrying request for the 11 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time
      [WARN] NVD API request failures are occurring; retrying request for the 5 time
      [WARN] NVD API request failures are occurring; retrying request for the 6 time
      [WARN] NVD API request failures are occurring; retrying request for the 7 time
      [WARN] NVD API request failures are occurring; retrying request for the 8 time
      [WARN] NVD API request failures are occurring; retrying request for the 9 time
      [WARN] NVD API request failures are occurring; retrying request for the 10 time
      [WARN] NVD API request failures are occurring; retrying request for the 11 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time
      [WARN] NVD API request failures are occurring; retrying request for the 5 time
      [WARN] NVD API request failures are occurring; retrying request for the 6 time
      [WARN] NVD API request failures are occurring; retrying request for the 7 time
      [WARN] NVD API request failures are occurring; retrying request for the 8 time
      [WARN] NVD API request failures are occurring; retrying request for the 9 time
      [WARN] NVD API request failures are occurring; retrying request for the 10 time
      [WARN] NVD API request failures are occurring; retrying request for the 11 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time
      [WARN] NVD API request failures are occurring; retrying request for the 5 time
      [WARN] NVD API request failures are occurring; retrying request for the 6 time
      [WARN] NVD API request failures are occurring; retrying request for the 7 time
      [WARN] NVD API request failures are occurring; retrying request for the 8 time
      [WARN] NVD API request failures are occurring; retrying request for the 9 time
      [WARN] NVD API request failures are occurring; retrying request for the 10 time
      [WARN] NVD API request failures are occurring; retrying request for the 11 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time
      [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time
      [WARN] NVD API request failures are occurring; retrying request for the 5 time
      [WARN] NVD API request failures are occurring; retrying request for the 6 time
      [WARN] NVD API request failures are occurring; retrying request for the 7 time
      [WARN] NVD API request failures are occurring; retrying request for the 8 time
      [WARN] NVD API request failures are occurring; retrying request for the 9 time
      [WARN] NVD API request failures are occurring; retrying request for the 10 time
      [WARN] NVD API request failures are occurring; retrying request for the 11 time
      [ERROR] Error updating the NVD Data
      org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data
      	at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:397)
      	at org.owasp.dependencycheck.data.update.NvdApiDataSource.update(NvdApiDataSource.java:117)
      	at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:906)
      	at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase(Engine.java:711)
      	at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:637)
      	at org.owasp.dependencycheck.App.runScan(App.java:266)
      	at org.owasp.dependencycheck.App.run(App.java:198)
      	at org.owasp.dependencycheck.App.main(App.java:90)
      Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiRetryExceededException: NVD Update Failed: attempted to retrieve data from the NVD unsuccessfully five times.
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:336)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423)
      	at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next(NvdCveClient.java:331)
      	at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:353)
      	... 7 common frames omitted

      I think, it is due to proxy configuration changes and the necessary

      export JAVA_TOOL_OPTIONS="-Dhttps.proxyHost=my-proxy.internal -Dhttps.proxyPort=8083"

      Could you check ?

      Thanks

          [JENKINS-75094] NVD API request failures are occurring

          Nikolas Falco added a comment -

          Did you update plugin or only the dependency-check tool version?

          Which is the plugin version are you using?

          Which is the dependency-check tool version?

          Which is you Jenkins proxy configuration?

           

          Which was the version of all above component for which was working?

          Nikolas Falco added a comment - Did you update plugin or only the dependency-check tool version? Which is the plugin version are you using? Which is the dependency-check tool version? Which is you Jenkins proxy configuration?   Which was the version of all above component for which was working?

          Today: OWASP Dependency-Check Plugin Version 5.6.0 and Dependency Check Cli 11.1.1

          Before: I am not sure but OWASP Dependency-Check Plugin Version 5.5.2 and Dependency Check Cli 8.x (without the NVD API KEY)

          The Job configuration is in attachement.

          I have no problem using the Maven plugin or directly the cli on the same Jenkins instance

           

           

          François Régnier added a comment - Today: OWASP Dependency-Check Plugin Version 5.6.0 and Dependency Check Cli 11.1.1 Before: I am not sure but OWASP Dependency-Check Plugin Version 5.5.2 and Dependency Check Cli 8.x (without the NVD API KEY) The Job configuration is in attachement. I have no problem using the Maven plugin or directly the cli on the same Jenkins instance    

            nfalco Nikolas Falco
            eucal François Régnier
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: