By using CVE_DB_INCR_UPDATE_AGE_THRES = CVE_DB_INCR_UPDATE_AGE_THRES = 6h, cve-check will do a NVD database full download if the database is older than 6h or reuse it un-updated if its younger than 6h. Since the metrics builder is scheduled every day, that will result in a daily full-download.
That will workaround NVD API limitations were some updates may be missed and the incrementaly updated database is not equivalent to a freshly downloaded database. Signed-off-by: Yoann Congal <[email protected]> --- This patch depends on [PATCH 2/2] cve-update-nvd2-native: Add an age threshold for incremental update https://lists.openembedded.org/g/openembedded-core/message/197046 --- config.json | 1 + 1 file changed, 1 insertion(+) diff --git a/config.json b/config.json index fdf4052..763121a 100644 --- a/config.json +++ b/config.json @@ -1290,6 +1290,7 @@ "CVE_CHECK_FORMAT_JSON = '1'", "CVE_CHECK_SHOW_WARNINGS = '0'", "CVE_DB_UPDATE_INTERVAL = '21600'", + "CVE_DB_INCR_UPDATE_AGE_THRES = '21600'", "BB_SERVER_TIMEOUT = '0'" ], "step1" : { -- 2.39.2
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#62753): https://lists.yoctoproject.org/g/yocto/message/62753 Mute This Topic: https://lists.yoctoproject.org/mt/104913380/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
