Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check for newer versions of dependency-check binary files available? #14

Open
cluick opened this issue Feb 8, 2023 · 2 comments
Open

Comments

@cluick
Copy link

cluick commented Feb 8, 2023

How does the caching of the dependency-check binary files work? Does this module always check for new versions of the binary files? If not, I would suggest to add an option which enables updates of the binary files. Otherwise this need to be performed manually based on the cached binary files an the redirect from https://github.com/jeremylong/DependencyCheck/releases/latest. I use this module in CI pipelines and I´m caching the contents of the `.dependency-check-bin" directory so that not every job need to download the files again. But sometimes I have problems, e.g. when using newer Node.js versions, which require updating the cached binary files.

@cluick cluick changed the title Check for newer versions of dependency-check binary files Check for newer versions of dependency-check binary files available? Feb 8, 2023
@centi
Copy link
Collaborator

centi commented Feb 10, 2023

Hi. There already is a CLI parameter, which allows you to force a new install even if there already is a binary downloaded.

--force-install - see: https://github.com/etnetera/owasp-dependency-check/blob/main/index.js#L10

@cluick
Copy link
Author

cluick commented Feb 11, 2023

Hi. There already is a CLI parameter, which allows you to force a new install even if there already is a binary downloaded.

--force-install - see: https://github.com/etnetera/owasp-dependency-check/blob/main/index.js#L10

Thanks for your answer! Yes, I know. But I don't want to download the binaries every time the dependency check is invoked. Only a newer version should be downloaded, to reduce traffic caused by jobs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants