Jenkins“调用OWASP依赖关系 - 仅检查NVD更新”不起作用

时间:2018-02-15 15:30:00

标签: jenkins owasp

我们正在使用AWS& Jenkins并希望使用“OWASP Dependency Check”-Plugin。我试图为NVD更新创建第一份工作。本教程的第一步(https://blog.dominikschadow.de/2015/07/using-owasp-dependency-check-as-jenkins-plugin/)帮助了我。我做的一切都是一样的,除了我把数据目录留空了。

在构建项目时,一切似乎工作正常,在工作区中我可以看到状态下载的文件。 11分钟后,构建失败,工作空间为空。

这是控制台输出:

Building remotely on default-7bzfp (jenkins-default-jenkins-slave) in         workspace /home/jenkins/workspace/dependency check/update nvd
[DependencyCheck] OWASP Dependency-Check Plugin v3.1.1
[DependencyCheck] Executing Dependency-Check with the following options:
[DependencyCheck]  -name = update nvd
[DependencyCheck]  -outputDirectory = /home/jenkins/workspace/dependency check/update nvd
[DependencyCheck]  -dataDirectory = /home/jenkins/workspace/dependency check/update nvd/dependency-check-data
[DependencyCheck]  -dataMirroringType = none
[DependencyCheck]  -isQuickQueryTimestampEnabled = false
[DependencyCheck]  -jarAnalyzerEnabled = false
[DependencyCheck]  -nspAnalyzerEnabled = false
[DependencyCheck]  -composerLockAnalyzerEnabled = false
[DependencyCheck]  -pythonDistributionAnalyzerEnabled = false
[DependencyCheck]  -pythonPackageAnalyzerEnabled = false
[DependencyCheck]  -rubyBundlerAuditAnalyzerEnabled = false
[DependencyCheck]  -rubyGemAnalyzerEnabled = false
[DependencyCheck]  -cocoaPodsAnalyzerEnabled = false
[DependencyCheck]  -swiftPackageManagerAnalyzerEnabled = false
[DependencyCheck]  -archiveAnalyzerEnabled = false
[DependencyCheck]  -assemblyAnalyzerEnabled = false
[DependencyCheck]  -centralAnalyzerEnabled = false
[DependencyCheck]  -nuspecAnalyzerEnabled = false
[DependencyCheck]  -nexusAnalyzerEnabled = false
[DependencyCheck]  -autoconfAnalyzerEnabled = false
[DependencyCheck]  -cmakeAnalyzerEnabled = false
[DependencyCheck]  -opensslAnalyzerEnabled = false
[DependencyCheck]  -showEvidence = true
[DependencyCheck]  -formats = XML 
[DependencyCheck]  -autoUpdate = true
[DependencyCheck]  -updateOnly = true
[DependencyCheck] Data directory created
[DependencyCheck] Performing NVD update only
Agent went offline during the build
ERROR: Connection was broken: org.jenkinsci.remoting.nio.FifoBuffer$CloseCause: Buffer close has been requested
    at org.jenkinsci.remoting.nio.FifoBuffer.close(FifoBuffer.java:426)
    at org.jenkinsci.remoting.nio.NioChannelHub$MonoNioTransport.closeR(NioChannelHub.j    ava:332)
    at org.jenkinsci.remoting.nio.NioChannelHub.run(NioChannelHub.java:565)
Caused: java.io.IOException: Unexpected EOF while receiving the data from     the channel. FIFO buffer has been already closed
    at org.jenkinsci.remoting.nio.NioChannelHub$3.run(NioChannelHub.java:618)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at hudson.remoting.SingleLaneExecutorService$1.run(SingleLaneExecutorService.java:112)
at jenkins.util.ContextResettingExecutorService$1.run(ContextResettingExecutorService.java:28)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)

Build step 'Invoke Dependency-Check NVD update only' marked build as failure
Finished: FAILURE

在50%的情况下,还有另一个输出结束:

[DependencyCheck] Performing NVD update only
[DependencyCheck] Unable to update the Dependency-Check database
Build step 'Invoke Dependency-Check NVD update only' changed build result to 
FAILURE
Finished: FAILURE

我无法在互联网上找到有关此问题的任何信息。

我已经尝试

  • 将请求内存设置为1024Mi
  • 将限制内存设置为1024Mi
  • 设置Jenkins连接到300
  • 的超时秒数
  • 停用QuickQuery

Jenkins运行在OpenJDK 64位服务器VM上,版本为2.73.3。

我需要你的帮助,因为我没有想法。如果您需要更多信息,请询问我是否会回复您。

0 个答案:

没有答案