lukaszlenart opened a new pull request, #312: URL: https://github.com/apache/struts-site/pull/312
Follow-up to #309/#310. The javadocs pipeline run **timed out and aborted** during `site:site`: ``` [INFO] Generating "Dependency Check" report --- dependency-check-maven:12.2.2:aggregate [WARNING] An NVD API Key was not provided ... the update can take a VERY long time [INFO] NVD API has 362,472 records in this update [INFO] Downloaded 60,000/362,488 (17%) Cancelling nested steps due to timeout Finished: ABORTED ``` ## Root cause The struts pom binds `org.owasp:dependency-check-maven` as a `<reporting>` plugin, so `site:site` runs its `aggregate` goal, which downloads the **entire NVD CVE database (~360k records)**. Without an NVD API key this is throttled/retried and never finished inside the 90-minute timeout. ## Fix Skip that one report during site generation: ``` mvn -B -V site:site site:stage -Ddependency-check.skip=true ``` `dependency-check.skip` is the plugin's documented user property for the aggregate mojo. The published Maven site doesn't need a security-scan report, so dropping it is the right call — no NVD API key or struts-pom change required. All other site reports (javadoc, project-info, RAT, versions) still generate. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
