See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/214/display/redirect>
Changes: ------------------------------------------ [...truncated 1002.64 KB...] [INFO] Finished Dependency Merging Analyzer (0 seconds) [INFO] Finished Version Filter Analyzer (0 seconds) [INFO] Finished Hint Analyzer (0 seconds) [INFO] Created CPE Index (1 seconds) [INFO] Skipping CPE Analysis for npm [INFO] Finished CPE Analyzer (1 seconds) [INFO] Finished False Positive Analyzer (0 seconds) [INFO] Finished NVD CVE Analyzer (0 seconds) [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) [INFO] Finished Dependency Bundling Analyzer (0 seconds) [INFO] Analysis Complete (2 seconds) [WARNING] One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp: tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093 sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769 See the dependency-check report for more details. [INFO] [INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase --- [INFO] [INFO] ---------------< org.apache.struts:struts2-rest-plugin >---------------- [INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT [17/35] [INFO] --------------------------------[ jar ]--------------------------------- Downloading from central: https://repo.maven.apache.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.9.9/jackson-dataformat-xml-2.9.9.pom Progress (1): 2.2/5.7 kBProgress (1): 5.0/5.7 kBProgress (1): 5.7 kB Downloaded from central: https://repo.maven.apache.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.9.9/jackson-dataformat-xml-2.9.9.pom (5.7 kB at 72 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/com/fasterxml/woodstox/woodstox-core/5.1.0/woodstox-core-5.1.0.pom Progress (1): 2.2/7.2 kBProgress (1): 5.0/7.2 kBProgress (1): 7.2 kB Downloaded from central: https://repo.maven.apache.org/maven2/com/fasterxml/woodstox/woodstox-core/5.1.0/woodstox-core-5.1.0.pom (7.2 kB at 424 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.pom Progress (1): 2.2/6.2 kBProgress (1): 5.0/6.2 kBProgress (1): 6.2 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.pom (6.2 kB at 41 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-core/7.2.2/juneau-core-7.2.2.pom Progress (1): 2.2/2.3 kBProgress (1): 2.3 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-core/7.2.2/juneau-core-7.2.2.pom (2.3 kB at 154 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau/7.2.2/juneau-7.2.2.pom Progress (1): 2.2/13 kBProgress (1): 5.0/13 kBProgress (1): 7.8/13 kBProgress (1): 11/13 kB Progress (1): 13 kB Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau/7.2.2/juneau-7.2.2.pom (13 kB at 648 kB/s) Downloading from central: https://repo.maven.apache.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.9.9/jackson-dataformat-xml-2.9.9.jar Downloading from central: https://repo.maven.apache.org/maven2/com/fasterxml/woodstox/woodstox-core/5.1.0/woodstox-core-5.1.0.jar Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.jar Progress (1): 2.2/100 kBProgress (1): 5.0/100 kBProgress (1): 7.7/100 kBProgress (1): 10/100 kB Progress (1): 13/100 kBProgress (1): 16/100 kBProgress (1): 19/100 kBProgress (1): 21/100 kBProgress (1): 24/100 kBProgress (1): 27/100 kBProgress (1): 30/100 kBProgress (1): 32/100 kBProgress (1): 36/100 kBProgress (1): 40/100 kBProgress (1): 45/100 kBProgress (1): 49/100 kBProgress (1): 53/100 kBProgress (1): 57/100 kBProgress (1): 61/100 kBProgress (1): 65/100 kBProgress (1): 69/100 kBProgress (1): 73/100 kBProgress (1): 77/100 kBProgress (1): 81/100 kBProgress (1): 85/100 kBProgress (1): 90/100 kBProgress (1): 94/100 kBProgress (1): 98/100 kBProgress (1): 100 kB Downloaded from central: https://repo.maven.apache.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.9.9/jackson-dataformat-xml-2.9.9.jar (100 kB at 3.6 MB/s) Progress (1): 2.2/514 kBProgress (1): 5.0/514 kBProgress (1): 7.7/514 kBProgress (1): 10/514 kB Progress (1): 13/514 kBProgress (1): 16/514 kBProgress (1): 19/514 kBProgress (1): 21/514 kBProgress (1): 24/514 kBProgress (1): 27/514 kBProgress (1): 30/514 kBProgress (1): 32/514 kBProgress (1): 36/514 kBProgress (1): 40/514 kBProgress (1): 45/514 kBProgress (1): 49/514 kBProgress (1): 53/514 kBProgress (1): 57/514 kBProgress (1): 61/514 kBProgress (1): 65/514 kBProgress (1): 69/514 kBProgress (1): 73/514 kBProgress (1): 77/514 kBProgress (1): 81/514 kBProgress (1): 85/514 kBProgress (1): 90/514 kBProgress (1): 94/514 kBProgress (1): 98/514 kBProgress (1): 102/514 kBProgress (1): 106/514 kBProgress (1): 110/514 kBProgress (1): 114/514 kBProgress (1): 118/514 kBProgress (1): 122/514 kBProgress (1): 126/514 kBProgress (1): 131/514 kBProgress (1): 135/514 kBProgress (1): 139/514 kBProgress (1): 143/514 kBProgress (1): 147/514 kBProgress (1): 151/514 kBProgress (1): 155/514 kBProgress (1): 159/514 kBProgress (1): 163/514 kBProgress (1): 167/514 kBProgress (1): 171/514 kBProgress (1): 176/514 kBProgress (1): 180/514 kBProgress (1): 184/514 kBProgress (1): 188/514 kBProgress (1): 192/514 kBProgress (1): 196/514 kBProgress (1): 200/514 kBProgress (1): 204/514 kBProgress (1): 208/514 kBProgress (1): 212/514 kBProgress (1): 217/514 kBProgress (1): 221/514 kBProgress (1): 225/514 kBProgress (1): 229/514 kBProgress (1): 233/514 kBProgress (1): 237/514 kBProgress (1): 241/514 kBProgress (1): 245/514 kBProgress (1): 249/514 kBProgress (1): 253/514 kBProgress (1): 258/514 kBProgress (1): 262/514 kBProgress (1): 266/514 kBProgress (1): 270/514 kBProgress (1): 274/514 kBProgress (1): 278/514 kBProgress (1): 282/514 kBProgress (1): 286/514 kBProgress (1): 290/514 kBProgress (1): 294/514 kBProgress (1): 298/514 kBProgress (1): 303/514 kBProgress (1): 307/514 kBProgress (1): 311/514 kBProgress (1): 315/514 kBProgress (1): 319/514 kBProgress (1): 323/514 kBProgress (1): 327/514 kBProgress (1): 331/514 kBProgress (1): 335/514 kBProgress (1): 339/514 kBProgress (1): 344/514 kBProgress (1): 348/514 kBProgress (1): 352/514 kBProgress (1): 356/514 kBProgress (1): 360/514 kBProgress (1): 364/514 kBProgress (1): 368/514 kBProgress (1): 372/514 kBProgress (1): 376/514 kBProgress (1): 380/514 kBProgress (1): 384/514 kBProgress (1): 389/514 kBProgress (1): 393/514 kBProgress (1): 397/514 kBProgress (1): 401/514 kBProgress (1): 405/514 kBProgress (1): 409/514 kBProgress (1): 413/514 kBProgress (1): 417/514 kBProgress (1): 421/514 kBProgress (1): 425/514 kBProgress (1): 430/514 kBProgress (1): 434/514 kBProgress (1): 438/514 kBProgress (1): 442/514 kBProgress (1): 446/514 kBProgress (1): 450/514 kBProgress (1): 454/514 kBProgress (1): 458/514 kBProgress (1): 462/514 kBProgress (1): 466/514 kBProgress (1): 471/514 kBProgress (1): 475/514 kBProgress (1): 479/514 kBProgress (1): 483/514 kBProgress (1): 487/514 kBProgress (1): 491/514 kBProgress (1): 495/514 kBProgress (1): 499/514 kBProgress (1): 503/514 kBProgress (1): 507/514 kBProgress (1): 511/514 kBProgress (1): 514 kB Downloaded from central: https://repo.maven.apache.org/maven2/com/fasterxml/woodstox/woodstox-core/5.1.0/woodstox-core-5.1.0.jar (514 kB at 5.5 MB/s) Progress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3 MB Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.jar (1.3 MB at 4.6 MB/s) [INFO] [INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin --- [INFO] [INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin --- [INFO] [INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin --- [INFO] [INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] Copying 4 resources [INFO] Copying 3 resources [INFO] [INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes> [INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API. [INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details. [INFO] [INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin --- [INFO] [INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources> [INFO] Copying 3 resources [INFO] [INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes> [INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations. [INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details. [INFO] [INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin --- [INFO] [INFO] ------------------------------------------------------- [INFO] T E S T S [INFO] ------------------------------------------------------- [INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console... [INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.129 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest [INFO] Running org.apache.struts2.rest.RestActionInvocationTest [INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.585 s - in org.apache.struts2.rest.RestActionInvocationTest [INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest [INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.476 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest [INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest [INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.44 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest [INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest [INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.15 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest [INFO] Running org.apache.struts2.rest.RestActionMapperTest [INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.14 s - in org.apache.struts2.rest.RestActionMapperTest [INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest [INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.037 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest [INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest [INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.078 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest [INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest [INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.02 s - in org.apache.struts2.rest.DefaultHttpHeadersTest [INFO] [INFO] Results: [INFO] [INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0 [INFO] [INFO] [INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin --- [INFO] Added 1 additional default licenses. [INFO] Added 1 custom approved licenses. [INFO] Will parse SCM ignores for exclusions... [INFO] Finished adding exclusions from SCM ignore files. [INFO] 61 implicit excludes (use -debug for more details). [INFO] Exclude: Jenkinsfile [INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl [INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js [INFO] Exclude: src/site/resources/tags/**/*.html [INFO] Exclude: src/main/resources/*LICENSE.txt [INFO] Exclude: src/test/resources/**/*.txt [INFO] Exclude: src/main/webapp/**/*.css [INFO] Exclude: src/main/webapp/**/*.map [INFO] Exclude: src/main/webapp/**/*.js [INFO] Exclude: src/main/webapp/**/*.svg [INFO] Exclude: src/main/webapp/**/*.txt [INFO] Exclude: src/main/resources/**/docs-urls.txt [INFO] Exclude: src/etc/header.txt [INFO] Exclude: src/main/resources/static/css/**/*.css [INFO] Exclude: src/main/resources/static/js/**/*.js [INFO] Exclude: src/main/resources/docs.cfg [INFO] Exclude: src/main/webapp/fonts/**/* [INFO] 39 resources included (use -debug for more details) [INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses. [INFO] [INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin --- [INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar> [INFO] [INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>> [INFO] [INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin --- [INFO] [INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin --- [INFO] [INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<< [INFO] [INFO] [INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin --- [INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar> [INFO] [INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin --- [INFO] Skipping because packaging 'jar' is not pom. [INFO] [INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin --- [INFO] Central analyzer disabled [INFO] Checking for updates [INFO] Skipping NVD check since last check was within 4 hours. [INFO] Skipping RetireJS update since last update was within 24 hours. [INFO] Check for updates complete (10 ms) [INFO] Analysis Started [INFO] Finished Archive Analyzer (0 seconds) [INFO] Finished File Name Analyzer (0 seconds) [INFO] Finished Jar Analyzer (0 seconds) [INFO] Finished Dependency Merging Analyzer (0 seconds) [INFO] Finished Version Filter Analyzer (0 seconds) [INFO] Finished Hint Analyzer (0 seconds) [INFO] Created CPE Index (1 seconds) [INFO] Skipping CPE Analysis for npm [INFO] Finished CPE Analyzer (1 seconds) [INFO] Finished False Positive Analyzer (0 seconds) [INFO] Finished NVD CVE Analyzer (0 seconds) [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) [INFO] Finished Dependency Bundling Analyzer (0 seconds) [INFO] Analysis Complete (2 seconds) [WARNING] One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin: jackson-databind-2.9.9.3.jar (cpe:/a:fasterxml:jackson-databind:2.9.9.3, cpe:/a:fasterxml:jackson:2.9.9.3, com.fasterxml.jackson.core:jackson-databind:2.9.9.3) : CVE-2019-16943, CVE-2019-16335, CVE-2019-16942, CVE-2019-17267, CVE-2019-14540 jackson-dataformat-xml-2.9.9.jar (cpe:/a:fasterxml:jackson:2.9.9, com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-databind:2.9.9) : CVE-2019-14379, CVE-2019-16943, CVE-2019-16335, CVE-2019-16942, CVE-2019-12814, CVE-2019-17267, CVE-2019-14439, CVE-2019-14540, CVE-2019-12384 See the dependency-check report for more details. [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT: [INFO] [INFO] Struts 2 Bill of Materials ......................... SUCCESS [ 1.926 s] [INFO] Struts 2 ........................................... SUCCESS [05:18 min] [INFO] Struts 2 Core ...................................... SUCCESS [02:22 min] [INFO] Struts 2 Plugins ................................... SUCCESS [ 4.849 s] [INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [ 4.871 s] [INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [ 6.030 s] [INFO] Struts 2 Tiles Plugin .............................. SUCCESS [ 7.263 s] [INFO] Struts 2 DWR Plugin ................................ SUCCESS [ 4.787 s] [INFO] Struts 2 Spring Plugin ............................. SUCCESS [ 6.501 s] [INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 13.700 s] [INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.422 s] [INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 13.083 s] [INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [ 8.503 s] [INFO] Struts 2 Async Plugin .............................. SUCCESS [ 6.982 s] [INFO] Struts 2 Webapps ................................... SUCCESS [ 4.719 s] [INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:11 min] [INFO] Struts 2 REST Plugin ............................... FAILURE [ 10.506 s] [INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED [INFO] Struts 2 CDI Plugin ................................ SKIPPED [INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED [INFO] Struts 2 GXP Plugin ................................ SKIPPED [INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED [INFO] Struts 2 Java Templates Plugin ..................... SKIPPED [INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED [INFO] Struts 2 OSGi Plugin ............................... SKIPPED [INFO] Struts 2 OVal Plugin ............................... SKIPPED [INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED [INFO] Struts 2 Plexus Plugin ............................. SKIPPED [INFO] Struts 2 Portlet Plugin ............................ SKIPPED [INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED [INFO] Struts 2 TestNG Plugin ............................. SKIPPED [INFO] Struts 2 OSGi Bundles .............................. SKIPPED [INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED [INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED [INFO] Struts 2 Assembly .................................. SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 10:41 min [INFO] Finished at: 2019-10-13T08:05:00Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin: [ERROR] [ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0': [ERROR] [ERROR] jackson-databind-2.9.9.3.jar: CVE-2019-16943, CVE-2019-16335, CVE-2019-16942, CVE-2019-17267, CVE-2019-14540 [ERROR] jackson-dataformat-xml-2.9.9.jar: CVE-2019-14379, CVE-2019-16943, CVE-2019-16335, CVE-2019-16942, CVE-2019-17267, CVE-2019-14540 [ERROR] [ERROR] See the dependency-check report for more details. [ERROR] [ERROR] [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException [ERROR] [ERROR] After correcting the problems, you can resume the build with the command [ERROR] mvn <args> -rf :struts2-rest-plugin Build step 'Execute shell' marked build as failure [locks-and-latches] Releasing all the locks [locks-and-latches] All the locks released Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org