Can we get the Jenkins notifications sent to [email protected] ?
-- David Blevins http://twitter.com/dblevins http://www.tomitribe.com > On Jan 15, 2021, at 9:25 AM, Apache Jenkins Server > <[email protected]> wrote: > > See > <https://ci-builds.apache.org/job/Tomee/job/master-owasp-check/20/display/redirect?page=changes> > > Changes: > > [Jean-Louis Monteiro] TOMEE-2937 Make sure endDate in the past does not fail > but puts the Timer into a state where it won't trigger > > > ------------------------------------------ > [...truncated 1.43 KB...] > Parsing POMs > Established TCP socket on 46827 > maven35-agent.jar already up to date > maven35-interceptor.jar already up to date > maven3-interceptor-commons.jar already up to date > [master-owasp-check] $ /home/jenkins/tools/java/latest1.8/bin/java -Xmx1536m > -cp > /home/jenkins/jenkins-agent/maven35-agent.jar:/home/jenkins/tools/maven/latest/boot/plexus-classworlds-2.6.0.jar:/home/jenkins/tools/maven/latest/conf/logging > jenkins.maven3.agent.Maven35Main /home/jenkins/tools/maven/latest/ > /home/jenkins/jenkins-agent/slave.jar > /home/jenkins/jenkins-agent/maven35-interceptor.jar > /home/jenkins/jenkins-agent/maven3-interceptor-commons.jar 46827 > <===[JENKINS REMOTING CAPACITY]===> channel started > Executing Maven: -B -f > <https://ci-builds.apache.org/job/Tomee/job/master-owasp-check/ws/pom.xml> -U > --show-version --fail-at-end clean install -Powasp-check -DskipTests > [1mApache Maven 3.6.3 (cecedd343002696d0abb50b32b541b8a6ba2883f)[m > Maven home: /usr/local/asfpackages/maven/apache-maven-3.6.3 > Java version: 1.8.0_252, vendor: Oracle Corporation, runtime: > /usr/local/asfpackages/java/openjdk-8u252-b09/jre > Default locale: en_US, platform encoding: ISO-8859-1 > OS name: "linux", version: "4.15.0-99-generic", arch: "amd64", family: "unix" > [INFO] Scanning for projects... > [WARNING] The project org.apache.tomee:tomee-project:pom:8.0.6-SNAPSHOT uses > prerequisites which is only intended for maven-plugin projects but not for > non maven-plugin projects. For such purposes you should use the > maven-enforcer-plugin. See > https://maven.apache.org/enforcer/enforcer-rules/requireMavenVersion.html > [INFO] > [INFO] -------------------< org.apache.tomee:tomee-project > >------------------- > [INFO] Building Apache OpenEJB 8.0.6-SNAPSHOT > [INFO] --------------------------------[ pom > ]--------------------------------- > [INFO] > [INFO] --- maven-clean-plugin:3.1.0:clean (default-clean) @ tomee-project --- > [INFO] > [INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ > tomee-project --- > [INFO] > [INFO] --- maven-remote-resources-plugin:1.5:process > (process-resource-bundles) @ tomee-project --- > [INFO] > [INFO] --- dependency-report-plugin:1.0.2:report (default) @ tomee-project --- > [INFO] No dependencies to report > [INFO] > [INFO] --- maven-bundle-plugin:3.3.0:manifest (bundle-manifest) @ > tomee-project --- > [WARNING] Ignoring project type pom - supportedProjectTypes = [bundle, jar, > maven-plugin] > [INFO] > [INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ > tomee-project --- > [INFO] No site descriptor found: nothing to attach. > [INFO] > [INFO] --- dependency-check-maven:6.0.3:check (default) @ tomee-project --- > [INFO] Checking for updates > [INFO] NVD CVE requires several updates; this could take a couple of minutes. > [INFO] Download Started for NVD CVE - 2009 > [INFO] Download Started for NVD CVE - 2008 > [INFO] Download Complete for NVD CVE - 2009 (824 ms) > [INFO] Processing Started for NVD CVE - 2009 > [INFO] Download Started for NVD CVE - 2010 > [INFO] Download Complete for NVD CVE - 2008 (897 ms) > [INFO] Download Started for NVD CVE - 2011 > [INFO] Processing Started for NVD CVE - 2008 > [INFO] Download Complete for NVD CVE - 2010 (785 ms) > [INFO] Download Started for NVD CVE - 2012 > [INFO] Processing Started for NVD CVE - 2010 > [INFO] Download Complete for NVD CVE - 2011 (853 ms) > [INFO] Download Started for NVD CVE - 2013 > [INFO] Processing Started for NVD CVE - 2011 > [INFO] Download Complete for NVD CVE - 2012 (784 ms) > [INFO] Download Complete for NVD CVE - 2013 (809 ms) > [INFO] Processing Started for NVD CVE - 2013 > [INFO] Download Started for NVD CVE - 2015 > [INFO] Processing Started for NVD CVE - 2012 > [INFO] Download Started for NVD CVE - 2014 > [INFO] Download Complete for NVD CVE - 2014 (811 ms) > [INFO] Download Complete for NVD CVE - 2015 (841 ms) > [INFO] Processing Started for NVD CVE - 2015 > [INFO] Download Started for NVD CVE - 2017 > [INFO] Processing Started for NVD CVE - 2014 > [INFO] Download Started for NVD CVE - 2016 > [INFO] Download Complete for NVD CVE - 2016 (960 ms) > [INFO] Download Started for NVD CVE - 2018 > [INFO] Processing Started for NVD CVE - 2016 > [INFO] Download Complete for NVD CVE - 2017 (1038 ms) > [INFO] Download Started for NVD CVE - 2019 > [INFO] Processing Started for NVD CVE - 2017 > [INFO] Download Complete for NVD CVE - 2018 (852 ms) > [INFO] Download Started for NVD CVE - 2020 > [INFO] Processing Started for NVD CVE - 2018 > [INFO] Download Complete for NVD CVE - 2019 (846 ms) > [INFO] Download Started for NVD CVE - 2021 > [INFO] Processing Started for NVD CVE - 2019 > [INFO] Download Complete for NVD CVE - 2021 (384 ms) > [INFO] Processing Started for NVD CVE - 2021 > [INFO] Download Complete for NVD CVE - 2020 (844 ms) > [INFO] Processing Started for NVD CVE - 2020 > [INFO] Processing Complete for NVD CVE - 2021 (9649 ms) > [INFO] Processing Complete for NVD CVE - 2009 (247264 ms) > [INFO] Processing Complete for NVD CVE - 2011 (246585 ms) > [INFO] Processing Complete for NVD CVE - 2010 (256670 ms) > [INFO] Processing Complete for NVD CVE - 2012 (268762 ms) > [INFO] Processing Complete for NVD CVE - 2013 (285708 ms) > [INFO] Processing Complete for NVD CVE - 2008 (294790 ms) > [INFO] Processing Complete for NVD CVE - 2015 (298108 ms) > [INFO] Processing Complete for NVD CVE - 2014 (311606 ms) > [INFO] Processing Complete for NVD CVE - 2016 (311082 ms) > [INFO] Processing Complete for NVD CVE - 2017 (336853 ms) > [INFO] Processing Complete for NVD CVE - 2020 (335912 ms) > [INFO] Processing Complete for NVD CVE - 2019 (337261 ms) > [INFO] Processing Complete for NVD CVE - 2018 (338362 ms) > [INFO] Download Started for NVD CVE - Modified > [INFO] Download Complete for NVD CVE - Modified (576 ms) > [INFO] Processing Started for NVD CVE - Modified > [INFO] Processing Complete for NVD CVE - Modified (1349 ms) > [INFO] Begin database maintenance > [INFO] Updated the CPE ecosystem on 110925 NVD records > [INFO] Removed the CPE ecosystem on 3 NVD records > [INFO] Cleaned up 60 orphaned NVD records > [INFO] End database maintenance (18573 ms) > [WARNING] A new version of dependency-check is available. Consider updating > to version 6.0.5. > [INFO] Begin database defrag > [INFO] End database defrag (4984 ms) > [INFO] Check for updates complete (376801 ms) > [INFO] > > Dependency-Check is an open source tool performing a best effort analysis of > 3rd party dependencies; false positives and false negatives may exist in the > analysis performed by the tool. Use of the tool and the reporting provided > constitutes acceptance for use in an AS IS condition, and there are NO > warranties, implied or otherwise, with regard to the analysis or its use. Any > use of the tool and the reporting provided is at the user?s risk. In no event > shall the copyright holder or OWASP be held liable for any damages whatsoever > arising out of or in connection with the use of this tool, the analysis > performed, or the resulting report. > > > [INFO] Analysis Started > [INFO] Finished File Name Analyzer (0 seconds) > [INFO] Finished Dependency Merging Analyzer (0 seconds) > [INFO] Finished Version Filter Analyzer (0 seconds) > [INFO] Finished Hint Analyzer (0 seconds) > [INFO] Created CPE Index (2 seconds) > [ERROR] Unable to create an Input Stream for > ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml > java.io.FileNotFoundException: > ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml (No such file > or directory) > at java.io.FileInputStream.open0 (Native Method) > at java.io.FileInputStream.open (FileInputStream.java:195) > at java.io.FileInputStream.<init> (FileInputStream.java:138) > at java.io.FileInputStream.<init> (FileInputStream.java:93) > at org.owasp.dependencycheck.utils.FileUtils.getResourceAsStream > (FileUtils.java:166) > at > org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer.loadSuppressionFile > (AbstractSuppressionAnalyzer.java:218) > at > org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer.loadSuppressionData > (AbstractSuppressionAnalyzer.java:132) > at > org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer.prepareAnalyzer > (AbstractSuppressionAnalyzer.java:103) > at org.owasp.dependencycheck.analyzer.CPEAnalyzer.prepareAnalyzer > (CPEAnalyzer.java:206) > at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.prepare > (AbstractAnalyzer.java:102) > at org.owasp.dependencycheck.Engine.initializeAnalyzer (Engine.java:781) > at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:617) > at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck > (BaseDependencyCheckMojo.java:1620) > at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute > (BaseDependencyCheckMojo.java:889) > at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo > (DefaultBuildPluginManager.java:137) > at org.apache.maven.lifecycle.internal.MojoExecutor.execute > (MojoExecutor.java:210) > at org.apache.maven.lifecycle.internal.MojoExecutor.execute > (MojoExecutor.java:156) > at org.apache.maven.lifecycle.internal.MojoExecutor.execute > (MojoExecutor.java:148) > at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject > (LifecycleModuleBuilder.java:117) > at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject > (LifecycleModuleBuilder.java:81) > at > org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build > (SingleThreadedBuilder.java:56) > at org.apache.maven.lifecycle.internal.LifecycleStarter.execute > (LifecycleStarter.java:128) > at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305) > at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192) > at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105) > at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main > (Maven35Launcher.java:130) > at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke > (NativeMethodAccessorImpl.java:62) > at sun.reflect.DelegatingMethodAccessorImpl.invoke > (DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke (Method.java:498) > at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced > (Launcher.java:282) > at org.codehaus.plexus.classworlds.launcher.Launcher.launch > (Launcher.java:225) > at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:178) > at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke > (NativeMethodAccessorImpl.java:62) > at sun.reflect.DelegatingMethodAccessorImpl.invoke > (DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke (Method.java:498) > at hudson.maven.Maven3Builder.call (Maven3Builder.java:139) > at hudson.maven.Maven3Builder.call (Maven3Builder.java:70) > at hudson.remoting.UserRequest.perform (UserRequest.java:211) > at hudson.remoting.UserRequest.perform (UserRequest.java:54) > at hudson.remoting.Request$2.run (Request.java:369) > at hudson.remoting.InterceptingExecutorService$1.call > (InterceptingExecutorService.java:72) > at java.util.concurrent.FutureTask.run (FutureTask.java:266) > at java.util.concurrent.ThreadPoolExecutor.runWorker > (ThreadPoolExecutor.java:1149) > at java.util.concurrent.ThreadPoolExecutor$Worker.run > (ThreadPoolExecutor.java:624) > at java.lang.Thread.run (Thread.java:748) > [WARNING] Suppression file > '${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml' does not exist > [ERROR] Exception occurred initializing CPE Analyzer. > [INFO] Finished CPE Analyzer (2 seconds) > [INFO] Finished False Positive Analyzer (0 seconds) > [INFO] Finished NVD CVE Analyzer (0 seconds) > [INFO] Finished Sonatype OSS Index Analyzer (0 seconds) > [ERROR] Unable to create an Input Stream for > ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml > java.io.FileNotFoundException: > ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml (No such file > or directory) > at java.io.FileInputStream.open0 (Native Method) > at java.io.FileInputStream.open (FileInputStream.java:195) > at java.io.FileInputStream.<init> (FileInputStream.java:138) > at java.io.FileInputStream.<init> (FileInputStream.java:93) > at org.owasp.dependencycheck.utils.FileUtils.getResourceAsStream > (FileUtils.java:166) > at > org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer.loadSuppressionFile > (AbstractSuppressionAnalyzer.java:218) > at > org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer.loadSuppressionData > (AbstractSuppressionAnalyzer.java:132) > at > org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer.prepareAnalyzer > (AbstractSuppressionAnalyzer.java:103) > at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.prepare > (AbstractAnalyzer.java:102) > at org.owasp.dependencycheck.Engine.initializeAnalyzer (Engine.java:781) > at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:617) > at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck > (BaseDependencyCheckMojo.java:1620) > at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute > (BaseDependencyCheckMojo.java:889) > at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo > (DefaultBuildPluginManager.java:137) > at org.apache.maven.lifecycle.internal.MojoExecutor.execute > (MojoExecutor.java:210) > at org.apache.maven.lifecycle.internal.MojoExecutor.execute > (MojoExecutor.java:156) > at org.apache.maven.lifecycle.internal.MojoExecutor.execute > (MojoExecutor.java:148) > at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject > (LifecycleModuleBuilder.java:117) > at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject > (LifecycleModuleBuilder.java:81) > at > org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build > (SingleThreadedBuilder.java:56) > at org.apache.maven.lifecycle.internal.LifecycleStarter.execute > (LifecycleStarter.java:128) > at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305) > at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192) > at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105) > at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main > (Maven35Launcher.java:130) > at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke > (NativeMethodAccessorImpl.java:62) > at sun.reflect.DelegatingMethodAccessorImpl.invoke > (DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke (Method.java:498) > at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced > (Launcher.java:282) > at org.codehaus.plexus.classworlds.launcher.Launcher.launch > (Launcher.java:225) > at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:178) > at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke > (NativeMethodAccessorImpl.java:62) > at sun.reflect.DelegatingMethodAccessorImpl.invoke > (DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke (Method.java:498) > at hudson.maven.Maven3Builder.call (Maven3Builder.java:139) > at hudson.maven.Maven3Builder.call (Maven3Builder.java:70) > at hudson.remoting.UserRequest.perform (UserRequest.java:211) > at hudson.remoting.UserRequest.perform (UserRequest.java:54) > at hudson.remoting.Request$2.run (Request.java:369) > at hudson.remoting.InterceptingExecutorService$1.call > (InterceptingExecutorService.java:72) > at java.util.concurrent.FutureTask.run (FutureTask.java:266) > at java.util.concurrent.ThreadPoolExecutor.runWorker > (ThreadPoolExecutor.java:1149) > at java.util.concurrent.ThreadPoolExecutor$Worker.run > (ThreadPoolExecutor.java:624) > at java.lang.Thread.run (Thread.java:748) > [WARNING] Suppression file > '${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml' does not exist > [ERROR] Exception occurred initializing Vulnerability Suppression Analyzer. > [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) > [INFO] Finished Dependency Bundling Analyzer (0 seconds) > [INFO] Analysis Complete (3 seconds) > [INFO] > ------------------------------------------------------------------------ > [INFO] BUILD FAILURE > [INFO] > ------------------------------------------------------------------------ > [INFO] Total time: 06:59 min > [INFO] Finished at: 2021-01-15T17:25:52Z > [INFO] > ------------------------------------------------------------------------ > Waiting for Jenkins to finish collecting data > [ERROR] Failed to execute goal org.owasp:dependency-check-maven:6.0.3:check > (default) on project tomee-project: One or more exceptions occurred during > dependency-check analysis: One or more exceptions occurred during analysis: > [ERROR] InitializationException: Warn initializing the suppression analyzer: > Failed to load ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml, > caused by Suppression file > '${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml' does not > exist. > [ERROR] caused by SuppressionParseException: Failed to load > ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml, caused by > Suppression file > '${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml' does not > exist. > [ERROR] InitializationException: Warn initializing the suppression analyzer: > Failed to load ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml, > caused by Suppression file > '${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml' does not > exist. > [ERROR] caused by SuppressionParseException: Failed to load > ${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml, caused by > Suppression file > '${maven.multiModuleProjectDirectory}/owasp-dc-suppression.xml' does not > exist. > [ERROR] -> [Help 1] > [ERROR] > [ERROR] To see the full stack trace of the errors, re-run Maven with the -e > switch. > [ERROR] Re-run Maven using the -X switch to enable full debug logging. > [ERROR] > [ERROR] For more information about the errors and possible solutions, please > read the following articles: > [ERROR] [Help 1] > http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException > [JENKINS] Archiving > <https://ci-builds.apache.org/job/Tomee/job/master-owasp-check/ws/pom.xml> to > org.apache.tomee/tomee-project/8.0.6-SNAPSHOT/tomee-project-8.0.6-SNAPSHOT.pom > [Fast Archiver] No prior successful build to compare, so performing full copy > of artifacts > Sending e-mails to: [email protected] > channel stopped
smime.p7s
Description: S/MIME cryptographic signature
