Subject: bug#76810: guix lint when nvd.nist.gov is down

From: Nicolas Graves <[email-masked]>
Date: Fri, 07 Mar 2025 13:57:32 +0100

Looks like for some reason nvd.nist.gov is down.
Discovery from that is that it makes it impossible to use one's cache
even in the case it might be pretty up-to-date :/
A warning would be better than an error here.

In srfi/srfi-1.scm:
    634:9  9 (for-each #<procedure 7f04b797ba80 at guix/scripts/lin…> …)
In guix/scripts/lint.scm:
    74:21  8 (_ _)
In guix/lint.scm:
   1606:4  7 (check-vulnerabilities #<package [email-masked] /home/gr…> …)
  1593:10  6 (_ _)
In unknown file:
           5 (force #<promise #<procedure 7f04c74a63e0 at guix/lint.…>)
In guix/lint.scm:
   1572:2  4 (_)
    927:2  3 (call-with-networking-fail-safe _ _ _)
In ice-9/boot-9.scm:
  1752:10  2 (with-exception-handler _ _ #:unwind? _ # _)
  1685:16  1 (raise-exception _ #:continuable? _)
  1683:16  0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1683:16: In procedure raise-exception:
ERROR:
  1. &http-get-error:
      uri: #<<uri> scheme: https userinfo: #f host: "nvd.nist.gov" port: #f path: "/feeds/json/cve/1.1/nvdcve-1.1-2025.json.gz" query: #f fragment: #f>
      code: 503
      reason: "Service Unavailable"
      headers: ((content-length . 107) (cache-control no-cache) (content-type text/html) (connection close))
  2. &message: "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2025.json.gz: HTTP download failed: 503 (\"Service Unavailable\")"
zsh: exit 1     ./pre-inst-env guix lint -c cve snappy

-- 
Best regards,
Nicolas Graves