I added the same code to livy months ago: https://issues.apache.org/jira/browse/LIVY-1032?filter=-2
It doesnt work: PLugin is too old and pointed at the wrong URL. new plugin works. edward@fedora:~/hadoop$ mvn dependency-check:aggregate [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 01:34 min [INFO] Finished at: 2026-04-01T22:03:18-04:00 [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.1.1:aggregate (default-cli) on project hadoop-main: Fatal exception(s) analyzing Apache Hadoop Main: One or more exceptions occurred during analysis: [ERROR] UpdateException: Unable to download meta file: https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta [ERROR] caused by DownloadFailedException: Download failed, unable to retrieve 'https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta'; Error downloading file https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta; unable to connect. [ERROR] caused by DownloadFailedException: Error downloading file https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta; unable to connect. [ERROR] caused by DownloadFailedException: Error retrieving https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta; received response code 403; Forbidden [ERROR] NoDataException: No documents exist [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException On Tue, Mar 31, 2026 at 7:55 PM Edward Capriolo <[email protected]> wrote: > https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-8186/2/ > > Hey friends, > > May we merge? Trust me when I say. The old owasp plugin no longer works. > The only thing to do is merge this. > > Thanks, > Edward >
