-
-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Can't use dependency-check plugin in Azure Devops due to large pom size #6823
Comments
This project does not support AzureDevOps. I would post the issue here: https://github.com/dependency-check/azuredevops |
I think if dependency-check pom line 120 can move to lucene-core 9.11.1 (from 8.11.3) that will remove the dependency on lucene-solr-grandparent completely. Of course, it may or may not be "just that simple". Azure DevOps Maven Artifact Feeds seem to have a pom file size limit (currently at 524288 bytes). |
and and I see that lucene 8.X is still having new releases alongside 9.X releases... so possibly not straightforward. |
fyi: For myself, I got the large POM issue resolved in Azure Artifacts. I'm not sure if it applies globally or just to my feed. |
How? |
I used an internal process. Externally, my suggestion would be to start here: https://developercommunity.visualstudio.com/AzureDevOps/report My description was something like:
and
|
Thanks. I've created an issue with Microsoft: https://developercommunity.visualstudio.com/t/pomxml-file-is-too-large;-the-limit-is-/10725600 |
Our builds with the lates version of the owasp-dependency plugin are failing due to a Azure specific issue with large pom files.
The latest version of Solr which is used by the plugin has a very large pom (https://repo1.maven.org/maven2/org/apache/lucene/lucene-solr-grandparent/8.11.3/lucene-solr-grandparent-8.11.3.pom) of 529Kb which is hitting the max pom size of Azure Devops.
[maven/v1/org/apache/lucene/lucene-solr-grandparent/8.11.3/lucene-solr-grandparent-8.11.3.pom,](https://pkgs.dev.azure.com/BeFrank/_packaging/befrank-libraries/maven/v1/org/apache/lucene/lucene-solr-grandparent/8.11.3/lucene-solr-grandparent-8.11.3.pom,) status: 400 Bad Request - pom.xml file is too large; the limit is 524288 bytes
Does anyone know a workaround for this problem?
The text was updated successfully, but these errors were encountered: