mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-17 23:04:07 +01:00
added more documentation
Former-commit-id: 1f3ef3a136bf05da797236b898371b4f7edb56a4
This commit is contained in:
16
src/site/markdown/data/mirrornvd.md
Normal file
16
src/site/markdown/data/mirrornvd.md
Normal file
@@ -0,0 +1,16 @@
|
||||
Mirroring the NVD from NIST
|
||||
===========================
|
||||
Several organizations have opted to mirror the NVD on an internal server
|
||||
and have the dependency-check clients simply pull the updates from the
|
||||
mirror. This setup is fairly simple:
|
||||
|
||||
1) Setup a nightly job to pull down the latest NVD files files from NIST
|
||||
* See the [Nist-Data-Mirror](https://github.com/stevespringett/nist-data-mirror/)
|
||||
project on github.
|
||||
* All of the NVD
|
||||
2) Configure the dependency-check clients to use the internal CVE urls. Note, all four URLs
|
||||
must be specified (see the configuration for the specific dependency-check client used):
|
||||
* cveUrl12Modified
|
||||
* cveUrl20Modified
|
||||
* cveUrl12Base
|
||||
* cveUrl20Base
|
||||
Reference in New Issue
Block a user