oss index unexpected response; status 500
rk7373 opened this issue · 0 comments
Since Jan 13 2023 we have been errors on dependency-check when building packages
We are using maven plugin 3.6.2 and dependency check plugin 8.0.0
Caused by: org.sonatype.ossindex.service.client.transport.Transport$TransportException: Unexpected response; status: 500
example 1
[WARNING] An error occurred while analyzing '.../.m2/repository/javax/ejb/javax.ejb-api/3.2.2/javax.ejb-api-3.2.2.jar' (Sonatype OSS Index Analyzer). [ERROR] Failed to execute goal org.owasp:dependency-check-maven:5.3.0:aggregate (default-cli) on project {appname}-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during analysis: [ERROR] Failed to request component-reports
example 2
[WARNING] An error occurred while analyzing '.../.m2/repository/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar' (Sonatype OSS Index Analyzer) [ERROR] Failed to execute goal org.owasp:dependency-check-maven:5.3.0:aggregate (default-cli) on project {appname}-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during analysis: [ERROR] Failed to request component-reports
Narrowed it down to two packages listed in ossindex but not available on maven, 404 not found
https://ossindex.sonatype.org/search?type=maven&q=org.jboss.cache
https://repo1.maven.org/maven2/org/jboss/cache/jbosscache-core/
https://ossindex.sonatype.org/component/pkg:maven/net.sf.ehcache/sizeof-agent
https://repo1.maven.org/maven2/net/sf/ehcache/sizeof-agent/