FrankChen021 commented on PR #20126: URL: https://github.com/apache/druid/pull/20126#issuecomment-5400694203
<!-- dependency-check-incremental-demonstration --> Dependency-Check cache validation for commit 32629a39935e5fa760063f67e9e518bdadcd7b73: - Initial PR run [32743390989](https://github.com/apache/druid/actions/runs/32743390989): the cache was initially absent, Dependency-Check downloaded the full NVD set (382,070 records), and the workflow saved the cache with key dependency-check-data-Linux-odc-12.2.2-32743390989. - Follow-up run [32756643364](https://github.com/apache/druid/actions/runs/32756643364): the restore step reported "Cache not found" for the odc-12.2.2 keys, so it downloaded the full NVD set again (382,161 records). It later logged "Skipping the NVD API Update as it was completed within the last 240 minutes." Conclusion: this follow-up did not demonstrate an Actions cache hit or incremental NVD update. The version-scoped key is present, but the cache saved by the pull_request run was not visible to this workflow_dispatch run, likely because of GitHub Actions cache scope by event/ref. Both runs failed on CVSS >= 7 findings after the scan; neither showed the previous URL-length database-schema error. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
