vul-java-db

README

vul-java-db

Overview

vul-java-db parses all indexes from maven repository and stores ArtifactID, GroupID, Version and sha1 for jar files to SQlite DB.

The DB is used in Vul to discover information about jars without GAV inside them.

Update interval

Every Thursday in 00:00

Download the java indexes database

You can download the actual compiled database via Vul or Oras CLI.

Vul:

VUL_TEMP_DIR=$(mktemp -d)
vul --cache-dir $VUL_TEMP_DIR image --download-java-db-only
tar -cf ./javadb.tar.gz -C $VUL_TEMP_DIR/java-db metadata.json vul-java.db
rm -rf $VUL_TEMP_DIR

oras >= v0.13.0:

$ oras pull ghcr.io/khulnasoft-lab/vul-java-db:1

oras < v0.13.0:

$ oras pull -a ghcr.io/khulnasoft-lab/vul-java-db:1

The database can be used for Air-Gapped Environment.