Mirroring the NVD from NIST =========================== Several organizations have opted to mirror the NVD on an internal server and have the dependency-check clients simply pull the updates from the mirror. This setup is fairly simple:
  1. Setup a nightly job to pull down the latest NVD files files from NIST
  2. Configure the dependency-check clients to use the internal CVE urls. Note, all four URLs must be specified (see the configuration for the specific dependency-check client used):