This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a commit to branch ci/javadocs-skip-owasp-report in repository https://gitbox.apache.org/repos/asf/struts-site.git
commit d827481fe7ed4ca386404950dd920dffe9dad81c Author: Lukasz Lenart <[email protected]> AuthorDate: Wed Jul 1 11:53:43 2026 +0200 ci: skip OWASP dependency-check report in javadocs site build The site:site aggregate report ran dependency-check-maven, which downloads the full NVD CVE database (~360k records) with no API key and blew the 90-minute timeout (build ABORTED at ~17%). The OWASP report is not needed for the published Maven site, so skip it with -Ddependency-check.skip=true. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- Jenkinsfile.javadocs | 5 ++++- docs/superpowers/plans/2026-07-01-jenkins-javadocs-pipeline.md | 4 +++- .../superpowers/specs/2026-07-01-jenkins-javadocs-pipeline-design.md | 4 +++- 3 files changed, 10 insertions(+), 3 deletions(-) diff --git a/Jenkinsfile.javadocs b/Jenkinsfile.javadocs index e79c6c263..061b36f1f 100644 --- a/Jenkinsfile.javadocs +++ b/Jenkinsfile.javadocs @@ -40,7 +40,10 @@ pipeline { fi mvn -B -V clean install -DskipTests - mvn -B -V site:site site:stage + # Skip the OWASP dependency-check report: its aggregate goal downloads the + # full NVD CVE database (~360k records) with no API key, blowing the timeout. + # Not needed for the published Maven site. + mvn -B -V site:site site:stage -Ddependency-check.skip=true ''' } } diff --git a/docs/superpowers/plans/2026-07-01-jenkins-javadocs-pipeline.md b/docs/superpowers/plans/2026-07-01-jenkins-javadocs-pipeline.md index 607608ba1..2cc3b814a 100644 --- a/docs/superpowers/plans/2026-07-01-jenkins-javadocs-pipeline.md +++ b/docs/superpowers/plans/2026-07-01-jenkins-javadocs-pipeline.md @@ -80,7 +80,9 @@ pipeline { fi mvn -B -V clean install -DskipTests - mvn -B -V site:site site:stage + # Skip the OWASP dependency-check report: its aggregate goal downloads the + # full NVD CVE database (~360k records) with no API key, blowing the timeout. + mvn -B -V site:site site:stage -Ddependency-check.skip=true ''' } } diff --git a/docs/superpowers/specs/2026-07-01-jenkins-javadocs-pipeline-design.md b/docs/superpowers/specs/2026-07-01-jenkins-javadocs-pipeline-design.md index d00d834d9..f12079499 100644 --- a/docs/superpowers/specs/2026-07-01-jenkins-javadocs-pipeline-design.md +++ b/docs/superpowers/specs/2026-07-01-jenkins-javadocs-pipeline-design.md @@ -92,7 +92,9 @@ pollutes the site repo: - clone `https://gitbox.apache.org/repos/asf/struts.git` into `target/struts` - checkout: if `STRUTS_TAG == main` → `git checkout main`, else `git checkout "tags/${STRUTS_TAG}"` - `mvn -B -V clean install -DskipTests` -- `mvn -B -V site:site site:stage` +- `mvn -B -V site:site site:stage -Ddependency-check.skip=true` (the OWASP + dependency-check report is skipped: its aggregate goal downloads the full NVD CVE + database with no API key and blows the build timeout; it is not needed for the site) **Stage 2 — Publish to source/maven**
