Skip to content

fix(CI): stop the NVD cache refresh from timing out on every cold sync - #46

Merged
Arc-E-Tect merged 1 commit into
mainfrom
fix-nvd-cold-sync-timeout
Jul 28, 2026
Merged

fix(CI): stop the NVD cache refresh from timing out on every cold sync#46
Arc-E-Tect merged 1 commit into
mainfrom
fix-nvd-cold-sync-timeout

Conversation

@Arc-E-Tect

@Arc-E-Tect Arc-E-Tect commented Jul 28, 2026

Copy link
Copy Markdown
Owner

Summary

Same root cause diagnosed and fixed in SoftwareEngineeringDoneRight-Code#222, which shares this exact workflow pattern:

  • Save NVD Database Cache only ran when the update didn't time out. A cold sync of the full NVD dataset (~370k records) can't complete inside the 15-minute timeout, so every run's partial download was discarded and the next scheduled run started over from zero - a permanent cache-miss loop no matter how long the timeout is.
  • nvd.delay was left unset (plugin default). Set it explicitly to 800ms - NVD's keyed API limit is 50 requests/30s (~600ms is enough), and 800ms is the exact value validated against a real cold sync in the Code repo.
  • Save NVD Database Cache now runs after any non-failed run (timed out or not), so runs accumulate progress instead of endlessly re-fetching the same first slice.

Same root cause identified in Arc-E-Tect/SoftwareEngineeringDoneRight-Code#222:

- nvd.delay was unset (plugin default), and Save NVD Database Cache was
  skipped whenever the update timed out, so a cold sync's partial
  progress was discarded and every scheduled run restarted the full
  ~370k-record NVD download from zero - a permanent cache-miss loop
  independent of the timeout value.
- Set nvd.delay = 800ms explicitly (NVD's keyed limit is 50 req/30s,
  i.e. ~600ms is enough; 800ms leaves margin), matching the value
  validated against a real cold sync in the Code repo.
- Save the cache after any non-failed run (timed out or not), so runs
  make incremental progress instead of endlessly re-fetching the same
  first slice.
@Arc-E-Tect
Arc-E-Tect merged commit cbaebf3 into main Jul 28, 2026
4 checks passed
@Arc-E-Tect
Arc-E-Tect deleted the fix-nvd-cold-sync-timeout branch July 28, 2026 05:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant