Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Broken OSV Integration #1023

Closed
Tracked by #860
VinodAnandan opened this issue Jan 21, 2024 · 2 comments
Closed
Tracked by #860

Broken OSV Integration #1023

VinodAnandan opened this issue Jan 21, 2024 · 2 comments
Assignees
Labels
defect Something isn't working

Comments

@VinodAnandan
Copy link
Collaborator

The integration with OSV in the Hyades project is currently broken,

Steps to Reproduce

  • Configure OSV values in yaml
    VULNERABILITY_SOURCE_GOOGLE_OSV_ENABLED: "true"
  • Configure OSV Settings in UI, Select Ecosystem values.
  • Configure OSV related task settings in UI.

Expected Behavior
The integration with OSV should work smoothly, allowing Hyades to mirror OSV vulnerabilities.

Additional Information
Version : master (18/01/2024)

@VinodAnandan VinodAnandan added the defect Something isn't working label Jan 21, 2024
@sahibamittal sahibamittal self-assigned this Jan 22, 2024
@VinodAnandan VinodAnandan mentioned this issue Jan 23, 2024
34 tasks
@sahibamittal
Copy link
Collaborator

sahibamittal commented Feb 13, 2024

OSV integration works as expected when message to Kafka topic is sent manually (like using redpanda). But, it seems it is not triggering the event on scheduled basis on its own.

Task scheduling needs to be fixed.

@sahibamittal
Copy link
Collaborator

All you need is configure below in hyades-apiserver > application.properties. Set it as per your need, below means 10th minute of every hour.
task.cron.mirror.osv=10 * * * *
No need to set CRON_EXPRESSION_FOR_OSV_MIRRORING_TASK explicitly in hyades.
Closing this issue as OSV mirroring is working as expected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
defect Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants