Removes `alpine.enforce.authentication` and `alpine.enforce.authorization` from `application.properties` and documentation. Settings those values to `false` is not supported.
Fixes#3043
Signed-off-by: nscuro <nscuro@protonmail.com>
Includes https://github.com/stevespringett/Alpine/pull/494 among other changes so far.
Also added documentation for `alpine.datanucleus.cache.level2.type`.
Signed-off-by: nscuro <nscuro@protonmail.com>
* Add parsing logic for Snyk API errors
Also move tests for SnykParser into their own class instead of keeping them in SnykAnalysisTaskTest.
Signed-off-by: nscuro <nscuro@protonmail.com>
* Use the actually useful error fields in Snyk responses
Signed-off-by: nscuro <nscuro@protonmail.com>
* Improve Snyk analyzer; Add tests; Fix various bugs
Signed-off-by: nscuro <nscuro@protonmail.com>
* Reword Snyk rate limiting config keys
Signed-off-by: nscuro <nscuro@protonmail.com>
* Fix SnykParserTest
Signed-off-by: nscuro <nscuro@protonmail.com>
* Use retries instead of client-side rate limiting when rate limited by the Snyk API
Addresses #2248
Signed-off-by: nscuro <nscuro@protonmail.com>
* Disable implicit retry behavior on all exceptions
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update Snyk config keys documentation
Signed-off-by: nscuro <nscuro@protonmail.com>
* Report sunset API version only once per analysis
Also send a notification instead of just logging it
Signed-off-by: nscuro <nscuro@protonmail.com>
* Add ability to use multiple Snyk tokens in round-robin
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update Snyk docs
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update default Snyk API version to 2022-11-14
Signed-off-by: nscuro <nscuro@protonmail.com>
* Fix visibility of index field
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update Snyk configuration screenshot
Signed-off-by: nscuro <nscuro@protonmail.com>
Signed-off-by: nscuro <nscuro@protonmail.com>
* Feature: Implementing caching for Repository metadata analyzer
Leverage the COMPONENTANALYSISCACHE table already used by vulnerability analyzers (See #1943)
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Implementing a configurable solution to cache stampede problem. Component analysis cache takes into account TTL (See #1943)
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Take into account some sonatype remarks.
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Take into account @nscuro review comments.
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Adding reasonable stampede bucker count interval in the documentation
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Fixing bad merge issue
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
Taking into account preliminary review comments : Adding resilience4j retry metrics, renaming the properties and making the retryer object static
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
Also, give it a name and provide the same `uncaughtExceptionHandler` that is used by Alpine's event services.
Signed-off-by: nscuro <nscuro@protonmail.com>
