Describe the bug
Using OWASP Check with a central database as described in https://jeremylong.github.io/DependencyCheck/data/database.html leads to an SQLException.
Version of dependency-check used
The problem occurs using version 8.1.2-release of the ANT-Task
Log file
no log needed, please see "Additional Context"
To Reproduce
Steps to reproduce the behavior:
- Create needed QWASP database in your favarite DB-System (not h2, bug was found using MSSQL)
- Create ANT-Script with call to Task, configured with a dedicated database server
- Run Ant Task (may need a lot of time due to the database will be filled initially)
- "Clean up orphans" will cause the SQLException
Expected behavior
Run without SQLException
Additional context
The causing bug is simply a typo in resources/data/dbStatements.properties in line 19:
CLEANUP_ORPHANS=DELETE FROM cpeEntry WHERE id not in (SELECT CPEEntryId FROM software);
contains a wrong column "CPEEntryId" for table software. The column seems to be case sensitive in MSSQL and should be "cpeEntryId". Please correct to
CLEANUP_ORPHANS=DELETE FROM cpeEntry WHERE id not in (SELECT cpeEntryId FROM software);
Describe the bug
Using OWASP Check with a central database as described in https://jeremylong.github.io/DependencyCheck/data/database.html leads to an SQLException.
Version of dependency-check used
The problem occurs using version 8.1.2-release of the ANT-Task
Log file
no log needed, please see "Additional Context"
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Run without SQLException
Additional context
The causing bug is simply a typo in resources/data/dbStatements.properties in line 19:
CLEANUP_ORPHANS=DELETE FROM cpeEntry WHERE id not in (SELECT CPEEntryId FROM software);contains a wrong column "CPEEntryId" for table software. The column seems to be case sensitive in MSSQL and should be "cpeEntryId". Please correct to
CLEANUP_ORPHANS=DELETE FROM cpeEntry WHERE id not in (SELECT cpeEntryId FROM software);