Due to various optimisations in recent releases, the previous system requirements are no longer accurate. As a result, the system requirements check that prevents startup if less than 4GB heap is available is no longer practical either.
Resource requirements largely depend on portfolio size and concurrent users.
Signed-off-by: nscuro <nscuro@protonmail.com>
* Raise supported versions for PostgreSQL and SQL Server to non-EOL versions
* Add notice about deprecation of RDBMSes other than PostgreSQL in DT v5
Signed-off-by: nscuro <nscuro@protonmail.com>
This surfaces the functionality introduced in https://github.com/stevespringett/Alpine/pull/508 to Dependency-Track. It was previously only integrated into Hyades.
Signed-off-by: nscuro <nscuro@protonmail.com>
This hosts a couple of details which aren't immediately obvious out of
the Keycloak walkthrough (which I had skimmed since we don't use that
IdP) and clarifies that groups must match identically including case.
Supersedes and closes#3269
Co-authored-by: Chris Adams <cadams@loc.gov>
Signed-off-by: nscuro <nscuro@protonmail.com>
Removes `alpine.enforce.authentication` and `alpine.enforce.authorization` from `application.properties` and documentation. Settings those values to `false` is not supported.
Fixes#3043
Signed-off-by: nscuro <nscuro@protonmail.com>
Includes https://github.com/stevespringett/Alpine/pull/494 among other changes so far.
Also added documentation for `alpine.datanucleus.cache.level2.type`.
Signed-off-by: nscuro <nscuro@protonmail.com>
* Add parsing logic for Snyk API errors
Also move tests for SnykParser into their own class instead of keeping them in SnykAnalysisTaskTest.
Signed-off-by: nscuro <nscuro@protonmail.com>
* Use the actually useful error fields in Snyk responses
Signed-off-by: nscuro <nscuro@protonmail.com>
* Improve Snyk analyzer; Add tests; Fix various bugs
Signed-off-by: nscuro <nscuro@protonmail.com>
* Reword Snyk rate limiting config keys
Signed-off-by: nscuro <nscuro@protonmail.com>
* Fix SnykParserTest
Signed-off-by: nscuro <nscuro@protonmail.com>
* Use retries instead of client-side rate limiting when rate limited by the Snyk API
Addresses #2248
Signed-off-by: nscuro <nscuro@protonmail.com>
* Disable implicit retry behavior on all exceptions
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update Snyk config keys documentation
Signed-off-by: nscuro <nscuro@protonmail.com>
* Report sunset API version only once per analysis
Also send a notification instead of just logging it
Signed-off-by: nscuro <nscuro@protonmail.com>
* Add ability to use multiple Snyk tokens in round-robin
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update Snyk docs
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update default Snyk API version to 2022-11-14
Signed-off-by: nscuro <nscuro@protonmail.com>
* Fix visibility of index field
Signed-off-by: nscuro <nscuro@protonmail.com>
* Update Snyk configuration screenshot
Signed-off-by: nscuro <nscuro@protonmail.com>
Signed-off-by: nscuro <nscuro@protonmail.com>
* Feature: Implementing caching for Repository metadata analyzer
Leverage the COMPONENTANALYSISCACHE table already used by vulnerability analyzers (See #1943)
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Implementing a configurable solution to cache stampede problem. Component analysis cache takes into account TTL (See #1943)
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Take into account some sonatype remarks.
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Take into account @nscuro review comments.
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Adding reasonable stampede bucker count interval in the documentation
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
* Feature: Implementing caching for Repository metadata analyzer
Fixing bad merge issue
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
Taking into account preliminary review comments : Adding resilience4j retry metrics, renaming the properties and making the retryer object static
Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>
Also, give it a name and provide the same `uncaughtExceptionHandler` that is used by Alpine's event services.
Signed-off-by: nscuro <nscuro@protonmail.com>
So it's consistent with the rest of the documentation for now. May want to change everything to environment variables later though...
Signed-off-by: nscuro <nscuro@protonmail.com>
