aboutsummaryrefslogtreecommitdiffstats
path: root/.templateconf
diff options
context:
space:
mode:
authorKonstantin Shemyak <konstantin.shemyak@ge.com>2018-08-13 10:23:28 +0300
committerRichard Purdie <richard.purdie@linuxfoundation.org>2018-09-27 12:16:47 +0100
commit2f84939b0e17dfba1fc43bf053871ea930d9a04c (patch)
treeef3e058cc58d5656e5151228c09fef1975bba6ae /.templateconf
parent1c6ae927ca8acc1e5f362b1424b2c6a5da1e8be9 (diff)
downloadopenembedded-core-contrib-2f84939b0e17dfba1fc43bf053871ea930d9a04c.tar.gz
cve-check.bbclass: do not download the CVE DB in package-specific tasks
Disable downloading of the vulnerability DB in do_check_cves() task. When invoked in this task, cve-check-tool attempts re-download of the CVE DB if the latter is older than certain threshold. While reasonable for a stand-alone CVE checker, this behavior can cause errors in parallel builds if the build time is longer than this threshold: * Other tasks might be using the DB. * Several packages can start the download of the same file at the same time. This check is not really needed, as the DB has been downloaded by cve_check_tool:do_populate_cve_db() which is a prerequisite of any do_build(). The DB will be at most (threshold + build_time) old. (From OE-Core rev: 125789b6ee6d47ab84192230f63971c4e22418ba) Signed-off-by: Konstantin Shemyak <konstantin.shemyak@ge.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to '.templateconf')
0 files changed, 0 insertions, 0 deletions