From a92962722e8355e533659ea9908fa625d5a053c7 Mon Sep 17 00:00:00 2001 From: vemv Date: Sun, 19 Dec 2021 20:44:36 +0100 Subject: [PATCH] nvd: recommend a pattern less prone to classpath interference. Dependencies from nvd shouldn't affect the analysed corpus, and vice versa. --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index e842d26a..3caa8783 100644 --- a/README.md +++ b/README.md @@ -648,9 +648,10 @@ Web servers and other standalone services run with Clojure CLI tools | Command | Description | |--------------------------------------------------+--------------------------------------------------------------------| -| `clojure -M:security/nvd "" "$(clojure -Spath)"` | check all jar files on the class path for security vulnerabilities | +| `cd ~; clojure -M:security/nvd "" "$(cd YOUR_PROJECT; clojure -Spath)"` | check all jar files on the class path for security vulnerabilities | > The first "" is required argument and can contain a filename to a json file of additional configuration. The second argument, `"$(clojure -Spath)"`, passes the project classpath to be analysed as a string. +> Please `cd` as adviced to ensure the recommended [classpath isolation](https://github.com/rm-hull/nvd-clojure/tree/1.9.0#avoiding-classpath-interference). ## Community activities