Invalid key Results in NPE
I set CLJ_WATSON_NVD_API_KEY with my key.
Using v6.0.1 and doing `clj -m clj-watson.cli scan -p deps.edn`:
```
Read 39 dependency-check properties.
No additional properties found.
Setting nvd.api.key from CLJ_WATSON_NVD_API_KEY.
2025-08-14 15:56:25,337 INFO Engine - Checking for updates
2025-08-14 15:56:25,928 ERROR Engine - Error updating the NVD Data
org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:399)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update(NvdApiDataSource.java:117)
at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:903)
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase(Engine.java:708)
at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:634)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at clojure.lang.Reflector.invokeMatchingMethod(Reflector.java:196)
at clojure.lang.Reflector.invokeMatchingMethod(Reflector.java:159)
at clojure.lang.Reflector.invokeNoArgInstanceMember(Reflector.java:467)
at clj_watson.controller.dependency_check.scanner$scan_jars.invokeStatic(scanner.clj:113)
at clj_watson.controller.dependency_check.scanner$scan_jars.invoke(scanner.clj:111)
at clj_watson.controller.dependency_check.scanner$start_BANG_$fn__943.invoke(scanner.clj:125)
at clj_watson.controller.dependency_check.scanner$start_BANG_.invokeStatic(scanner.clj:123)
at clj_watson.controller.dependency_check.scanner$start_BANG_.invoke(scanner.clj:116)
at clj_watson.entrypoint$eval8852$fn__8854.invoke(entrypoint.clj:26)
at clojure.lang.MultiFn.invoke(MultiFn.java:229)
at clj_watson.entrypoint$do_scan.invokeStatic(entrypoint.clj:39)
at clj_watson.entrypoint$do_scan.invoke(entrypoint.clj:35)
at clj_watson.cli$_main.invokeStatic(cli.clj:10)
at clj_watson.cli$_main.doInvoke(cli.clj:7)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.lang.Var.applyTo(Var.java:707)
at clojure.core$apply.invokeStatic(core.clj:667)
at clojure.main$main_opt.invokeStatic(main.clj:515)
at clojure.main$main_opt.invoke(main.clj:511)
at clojure.main$main.invokeStatic(main.clj:665)
at clojure.main$main.doInvoke(main.clj:617)
at clojure.lang.RestFn.applyTo(RestFn.java:140)
at clojure.lang.Var.applyTo(Var.java:707)
at clojure.main.main(main.java:40)
Caused by: java.lang.NullPointerException: null
at java.base/java.lang.String.<init>(String.java:561)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:418)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next(NvdCveClient.java:357)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:355)
... 32 common frames omitted
2025-08-14 15:56:26,062 INFO KnownExploitedDataSource - Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
2025-08-14 15:56:26,323 INFO CveDB - Begin database defrag
2025-08-14 15:56:26,373 INFO CveDB - End database defrag (52 ms)
2025-08-14 15:56:26,375 WARN Engine - Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
2025-08-14 15:56:26,375 ERROR Engine - Unable to continue dependency-check analysis.
Execution error (ExceptionCollection) at org.owasp.dependencycheck.Engine/throwFatalExceptionCollection (Engine.java:1178).
One or more exceptions occurred during analysis:
UpdateException: Error updating the NVD Data
caused by NullPointerException: null
NoDataException: No documents exist
```
26 条评论