Build failed in Jenkins: Struts-master-JDK7-dependency-check #43

classic Classic list List threaded Threaded
26 messages Options
12
Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #43

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/43/display/redirect?page=changes>

Changes:

[lukaszlenart] Upgrades OWASP Dependency Check plugin to the latest version and reduces

------------------------------------------
[...truncated 1.15 MB...]

2018-02-22 22:32:51,091 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - execute:
  [0ms] - invoke:
    [0ms] - interceptorMapping: test
      [0ms] - invoke:
        [0ms] - invokeAction: TestInterceptorParam
        [0ms] - executeResult: error

2018-02-22 22:32:51,116 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [1ms] - create DefaultActionProxy:
  [1ms] - actionCreate: Foo

2018-02-22 22:32:51,116 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action /does/not/exist/Foo
2018-02-22 22:32:51,120 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action /does/not/exist/Foo
2018-02-22 22:32:51,121 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [/does/not/exist/Foo!execute] took 5 ms.
2018-02-22 22:32:51,121 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [5ms] - execute:
  [5ms] - invoke:
    [5ms] - interceptorMapping: timer
      [5ms] - invoke:
        [5ms] - interceptorMapping: logger
          [4ms] - invoke:
            [4ms] - interceptorMapping: staticParams
              [1ms] - invoke:
                [1ms] - interceptorMapping: modelDriven
                  [1ms] - invoke:
                    [1ms] - interceptorMapping: params
                      [0ms] - invoke:
                        [0ms] - invokeAction: Foo
                        [0ms] - executeResult: success
                          [0ms] - create DefaultActionProxy:
                            [0ms] - actionCreate: Bar
                          [0ms] - execute:
                            [0ms] - invoke:
                              [0ms] - invokeAction: Bar
                              [0ms] - executeResult: error

2018-02-22 22:32:51,126 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [myAction!execute] took 0 ms.
2018-02-22 22:32:51,131 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [myApp/myAction!input] took 0 ms.
2018-02-22 22:32:51,135 WARN  [main] interceptor.TimerInterceptor (TimerInterceptor.java:214) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,139 ERROR [main] interceptor.TimerInterceptor (TimerInterceptor.java:216) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,151 FATAL [main] interceptor.TimerInterceptor (TimerInterceptor.java:218) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,155 ERROR [main] interceptor.TimerInterceptor (TimerInterceptor.java:216) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,159 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:212) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,163 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,167 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,175 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:212) - Executed action [myApp/myAction!execute] took 0 ms.
2018-02-22 22:32:51,950 WARN  [main] xwork2.DefaultLocaleProvider (DefaultLocaleProvider.java:53) - Cannot convert [_] to proper locale
java.lang.IllegalArgumentException: Invalid locale format: _
        at org.apache.commons.lang3.LocaleUtils.toLocale(LocaleUtils.java:102) ~[commons-lang3-3.6.jar:3.6]
        at com.opensymphony.xwork2.DefaultLocaleProvider.isValidLocaleString(DefaultLocaleProvider.java:51) [classes/:?]
        at org.apache.struts2.interceptor.I18nInterceptor.getLocaleFromParam(I18nInterceptor.java:166) [classes/:?]
        at org.apache.struts2.interceptor.I18nInterceptor$SessionLocaleHandler.find(I18nInterceptor.java:276) [classes/:?]
        at org.apache.struts2.interceptor.I18nInterceptor.intercept(I18nInterceptor.java:104) [classes/:?]
        at org.apache.struts2.interceptor.I18nInterceptorTest.testDefaultLocale(I18nInterceptorTest.java:88) [test-classes/:?]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.7.0_80]
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[?:1.7.0_80]
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.7.0_80]
        at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_80]
        at junit.framework.TestCase.runTest(TestCase.java:176) [junit-4.12.jar:4.12]
        at junit.framework.TestCase.runBare(TestCase.java:141) [junit-4.12.jar:4.12]
        at junit.framework.TestResult$1.protect(TestResult.java:122) [junit-4.12.jar:4.12]
        at junit.framework.TestResult.runProtected(TestResult.java:142) [junit-4.12.jar:4.12]
        at junit.framework.TestResult.run(TestResult.java:125) [junit-4.12.jar:4.12]
        at junit.framework.TestCase.run(TestCase.java:129) [junit-4.12.jar:4.12]
        at junit.framework.TestSuite.runTest(TestSuite.java:252) [junit-4.12.jar:4.12]
        at junit.framework.TestSuite.run(TestSuite.java:247) [junit-4.12.jar:4.12]
        at org.testng.junit.JUnitTestRunner.doRun(JUnitTestRunner.java:250) [testng-5.14.10.jar:?]
        at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:223) [testng-5.14.10.jar:?]
        at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211) [testng-5.14.10.jar:?]
        at org.testng.TestRunner$1.run(TestRunner.java:659) [testng-5.14.10.jar:?]
        at org.testng.TestRunner.runWorkers(TestRunner.java:1147) [testng-5.14.10.jar:?]
        at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690) [testng-5.14.10.jar:?]
        at org.testng.TestRunner.run(TestRunner.java:597) [testng-5.14.10.jar:?]
        at org.testng.SuiteRunner.runTest(SuiteRunner.java:317) [testng-5.14.10.jar:?]
        at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312) [testng-5.14.10.jar:?]
        at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274) [testng-5.14.10.jar:?]
        at org.testng.SuiteRunner.run(SuiteRunner.java:223) [testng-5.14.10.jar:?]
        at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52) [testng-5.14.10.jar:?]
        at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86) [testng-5.14.10.jar:?]
        at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039) [testng-5.14.10.jar:?]
        at org.testng.TestNG.runSuitesLocally(TestNG.java:964) [testng-5.14.10.jar:?]
        at org.testng.TestNG.run(TestNG.java:900) [testng-5.14.10.jar:?]
        at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135) [surefire-testng-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198) [surefire-testng-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94) [surefire-testng-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146) [surefire-testng-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373) [surefire-booter-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334) [surefire-booter-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119) [surefire-booter-2.20.1.jar:2.20.1]
        at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407) [surefire-booter-2.20.1.jar:2.20.1]
2018-02-22 22:32:51,970 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
  [0ms] - actionCreate: chainedAction

2018-02-22 22:32:51,977 INFO  [main] struts2.TestResult (TestResult.java:74) - executing TestResult.
2018-02-22 22:32:51,980 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [10ms] - execute:
  [10ms] - invoke:
    [1ms] - invokeAction: chainedAction
    [9ms] - executeResult: error
      [0ms] - create DefaultActionProxy:
        [0ms] - actionCreate: chaintoAction
      [9ms] - execute:
        [9ms] - invoke:
          [9ms] - interceptorMapping: chainStack
            [4ms] - invoke:
              [0ms] - invokeAction: chaintoAction
              [3ms] - executeResult: success

[INFO] Tests run: 1790, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 79.677 s - in TestSuite
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1790, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-core ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1580 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 1573 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-core >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-core <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-core ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-core ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (15 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (4 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Core:

struts-core-1.3.8.jar (org.apache.struts:struts-core:1.3.8, cpe:/a:apache:struts:1.3.8) : CVE-2016-1181, CVE-2016-1182, CVE-2014-0114, CVE-2015-0899
struts-tiles-1.3.8.jar (cpe:/a:apache:tiles:1.3.8, org.apache.struts:struts-tiles:1.3.8, cpe:/a:apache:struts:1.3.8) : CVE-2016-1181, CVE-2016-1182, CVE-2014-0114, CVE-2015-0899
bsh-2.0b4.jar (org.beanshell:bsh:2.0b4, cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.449 s]
[INFO] Struts 2 ........................................... SUCCESS [02:42 min]
[INFO] Struts 2 Core ...................................... FAILURE [01:55 min]
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:41 min
[INFO] Finished at: 2018-02-22T22:33:02Z
[INFO] Final Memory: 61M/1869M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-core:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] struts-core-1.3.8.jar: CVE-2014-0114
[ERROR] struts-tiles-1.3.8.jar: CVE-2014-0114
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #44

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/44/display/redirect?page=changes>

Changes:

[lukaszlenart] Cleans up suppression file and uses full path

------------------------------------------
[...truncated 1.30 MB...]
2018-02-25 22:40:22,436 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [1ms] - execute:
  [1ms] - invoke:
    [1ms] - interceptorMapping: staticParams
      [1ms] - invoke:
        [1ms] - interceptorMapping: modelDriven
          [1ms] - invoke:
            [1ms] - interceptorMapping: params
              [0ms] - invoke:
                [0ms] - invokeAction: WildCardInput
                [0ms] - executeResult: input

2018-02-25 22:40:22,436 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
  [0ms] - actionCreate: WildCardError

2018-02-25 22:40:22,436 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - execute:
  [0ms] - invoke:
    [0ms] - interceptorMapping: staticParams
      [0ms] - invoke:
        [0ms] - interceptorMapping: modelDriven
          [0ms] - invoke:
            [0ms] - interceptorMapping: params
              [0ms] - invoke:
                [0ms] - invokeAction: WildCardError
                [0ms] - executeResult: error

org.testng.TestNGException:
Failure in JUnit mode for class org.apache.struts2.views.jsp.AbstractUITagTest: could not create/run JUnit test suite:
Cannot find JUnit method class junit.framework.TestSuite$1.warning
        at org.testng.junit.JUnitTestRunner.runFailed(JUnitTestRunner.java:237)
        at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:230)
        at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211)
        at org.testng.TestRunner$1.run(TestRunner.java:659)
        at org.testng.TestRunner.runWorkers(TestRunner.java:1147)
        at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690)
        at org.testng.TestRunner.run(TestRunner.java:597)
        at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
        at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
        at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
        at org.testng.SuiteRunner.run(SuiteRunner.java:223)
        at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
        at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
        at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
        at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
        at org.testng.TestNG.run(TestNG.java:900)
        at org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:135)
        at org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:198)
        at org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:94)
        at org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:146)
        at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:373)
        at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:334)
        at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:119)
        at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:407)
2018-02-25 22:40:23,655 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
  [0ms] - actionCreate: hello

2018-02-25 22:40:23,655 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - actionCreate: hello

2018-02-25 22:40:23,777 WARN  [main] components.ServletUrlRenderer (ServletUrlRenderer.java:264) - Unknown value for includeParams parameter to URL tag: unknown
2018-02-25 22:40:24,286 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [1ms] - create DefaultActionProxy:
  [1ms] - actionCreate: MyBean

2018-02-25 22:40:24,286 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action MyBean
2018-02-25 22:40:24,291 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action MyBean
2018-02-25 22:40:24,291 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [MyBean!execute] took 5 ms.
2018-02-25 22:40:24,291 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [5ms] - execute:
  [5ms] - invoke:
    [5ms] - interceptorMapping: timer
      [5ms] - invoke:
        [5ms] - interceptorMapping: logger
          [5ms] - invoke:
            [5ms] - interceptorMapping: staticParams
              [5ms] - invoke:
                [5ms] - interceptorMapping: modelDriven
                  [5ms] - invoke:
                    [5ms] - interceptorMapping: params
                      [0ms] - invoke:
                        [0ms] - invokeAction: MyBean
                        [0ms] - executeResult: success

2018-02-25 22:40:24,315 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
  [0ms] - actionCreate: MyBean

2018-02-25 22:40:24,315 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action MyBean
2018-02-25 22:40:24,320 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action MyBean
2018-02-25 22:40:24,320 INFO  [main] interceptor.TimerInterceptor (TimerInterceptor.java:205) - Executed action [MyBean!execute] took 5 ms.
2018-02-25 22:40:24,320 INFO  [main] profiling.UtilTimerStack (UtilTimerStack.java:385) - [5ms] - execute:
  [5ms] - invoke:
    [5ms] - interceptorMapping: timer
      [5ms] - invoke:
        [5ms] - interceptorMapping: logger
          [4ms] - invoke:
            [4ms] - interceptorMapping: staticParams
              [4ms] - invoke:
                [4ms] - interceptorMapping: modelDriven
                  [4ms] - invoke:
                    [4ms] - interceptorMapping: params
                      [0ms] - invoke:
                        [0ms] - invokeAction: MyBean
                        [0ms] - executeResult: success

[INFO] Tests run: 1790, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 85.288 s - in TestSuite
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1790, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-core ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1580 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 1573 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-core >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-core <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-core ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-core ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (201 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[WARNING] Suppression file '<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/src/etc/project-suppression.xml'> does not exist
[ERROR] Exception occurred initializing Cpe Suppression Analyzer.
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[WARNING] Suppression file '<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/src/etc/project-suppression.xml'> does not exist
[ERROR] Exception occurred initializing Vulnerability Suppression Analyzer.
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (5 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Core:

struts-core-1.3.8.jar (org.apache.struts:struts-core:1.3.8, cpe:/a:apache:struts:1.3.8) : CVE-2016-1181, CVE-2016-1182, CVE-2014-0114, CVE-2015-0899
struts-tiles-1.3.8.jar (cpe:/a:apache:tiles:1.3.8, org.apache.struts:struts-tiles:1.3.8, cpe:/a:apache:struts:1.3.8) : CVE-2016-1181, CVE-2016-1182, CVE-2014-0114, CVE-2015-0899
struts-annotations-1.0.6.jar (cpe:/a:apache:struts:1.0.6, org.apache.struts:struts-annotations:1.0.6) : CVE-2006-1548, CVE-2006-1547, CVE-2006-1546
bsh-2.0b4.jar (org.beanshell:bsh:2.0b4, cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.196 s]
[INFO] Struts 2 ........................................... SUCCESS [09:53 min]
[INFO] Struts 2 Core ...................................... FAILURE [02:07 min]
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 12:06 min
[INFO] Finished at: 2018-02-25T22:40:36Z
[INFO] Final Memory: 61M/1894M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-core:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] struts-core-1.3.8.jar: CVE-2014-0114
[ERROR] struts-tiles-1.3.8.jar: CVE-2014-0114
[ERROR] struts-annotations-1.0.6.jar: CVE-2006-1547, CVE-2006-1546
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #45

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/45/display/redirect?page=changes>

Changes:

[yasserzamani] fix java.net.JarURLConnection#parseSpecs

[yasserzamani] comment jira issue id and fix a few typos

[yasserzamani] replace sun.net.www.ParseUtil#decode

[yasserzamani] fix javadoc to being consistent with WW-3915 changes

[paul.zepernick] WW-4923 Null check to avoid NPE when not passing a JDBC connection to

[lukaszlenart] Fixes suppression file

[yasserzamani] add test if connection close after result

[yasserzamani] initialize session

[yasserzamani] make newly added methods protected to allow users to override them

[github] fix location with full path of resource

------------------------------------------
[...truncated 1.06 MB...]
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.165 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (201 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (191 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.086 s]
[INFO] Struts 2 ........................................... SUCCESS [02:18 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:07 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.578 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.790 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.676 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.824 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.403 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:57 min
[INFO] Finished at: 2018-03-01T22:33:16Z
[INFO] Final Memory: 73M/1920M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #46

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/46/display/redirect?page=changes>

Changes:

[lukaszlenart] Adds Jackson XML binding dependency

[lukaszlenart] Defines a new handler using Jackson XML

[lukaszlenart] Adds test to cover basic functionality

[lukaszlenart] Adds example how to use the handler

[lukaszlenart] Adds explanation how to use the commented configuration

[lukaszlenart] [maven-release-plugin] prepare release STRUTS_2_5_16

[lukaszlenart] [maven-release-plugin] prepare for next development iteration

------------------------------------------
[...truncated 1.14 MB...]
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.105 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (13 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (13 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.411 s]
[INFO] Struts 2 ........................................... SUCCESS [57:29 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:49 min]
[INFO] Struts Plugins ..................................... SUCCESS [  2.821 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.069 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.485 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  4.657 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  2.566 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 59:38 min
[INFO] Finished at: 2018-03-04T23:27:54Z
[INFO] Final Memory: 69M/1910M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #47

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/47/display/redirect>

------------------------------------------
[...truncated 1.03 MB...]
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.111 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (15 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (15 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.535 s]
[INFO] Struts 2 ........................................... SUCCESS [02:10 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:54 min]
[INFO] Struts Plugins ..................................... SUCCESS [  3.042 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  2.971 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  4.206 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  4.963 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  2.618 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:29 min
[INFO] Finished at: 2018-03-08T22:33:27Z
[INFO] Final Memory: 68M/1894M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #48

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/48/display/redirect>

------------------------------------------
[...truncated 1.05 MB...]
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.102 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (14 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (15 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.316 s]
[INFO] Struts 2 ........................................... SUCCESS [01:38 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:45 min]
[INFO] Struts Plugins ..................................... SUCCESS [  2.702 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.299 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.666 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  4.494 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  2.594 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 03:43 min
[INFO] Finished at: 2018-03-11T22:34:11Z
[INFO] Final Memory: 72M/1874M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #49

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/49/display/redirect>

------------------------------------------
[...truncated 1.12 MB...]
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.123 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (142 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (141 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.745 s]
[INFO] Struts 2 ........................................... SUCCESS [33:50 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:02 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.414 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.619 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.957 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.765 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.274 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 36:22 min
[INFO] Finished at: 2018-03-15T23:04:44Z
[INFO] Final Memory: 68M/1908M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #50

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/50/display/redirect?page=changes>

Changes:

[amashchenko] WW-4875 Add ability to use Java based configuration

[amashchenko] WW-4875 Add location information for java based configuration

[aleksandr.7m] replace String.valueOf with Objects.toString to better handle null

[aleksandr.7m] WW-4875 Add convention constant configuration

[aleksandr.7m] WW-4875 Add json constant configuration

[aleksandr.7m] Make ConventionConstantConfig inherit map of constants from

[aleksandr.7m] WW-4875 Add rest constant configuration

[aleksandr.7m] WW-4875 Add spring constant configuration

[zhouyanming] Align OptGroup with Select

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (add commons-text

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace

[amashchenko] WW-685 Add class to hold conversion related data

[amashchenko] WW-685 Add generic type conversion error message

[amashchenko] WW-685 Add tests

[amashchenko] WW-685 Fix getText expression

[github] fix two issues for ListUIBean

[github] convert supplied value to list when isn't iterable

[yasserzamani] fix list when not found in stack and so is null

[amashchenko] Add ognlAutoGrowthCollectionLimit constant to java config

------------------------------------------
[...truncated 1.11 MB...]
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.14 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (243 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (207 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.476 s]
[INFO] Struts 2 ........................................... SUCCESS [ 24.916 s]
[INFO] Struts 2 Core ...................................... SUCCESS [02:13 min]
[INFO] Struts Plugins ..................................... SUCCESS [  5.252 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.095 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.774 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.848 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.681 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 03:11 min
[INFO] Finished at: 2018-03-18T22:31:28Z
[INFO] Final Memory: 82M/1897M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #51

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/51/display/redirect?page=changes>

Changes:

[yasser.zamani] WW-4874 Introduces Servlet3 plugin by adding support for async action

[yasser.zamani] WW-4874 Refactors technology name, servlet3, to asset name, async

[yasser.zamani] WW-4874 Adds unit tests

[yasser.zamani] WW-4874 Updates parent version

[yasserzamani] WW-4874 Renames local variable inv to invocation

[yasserzamani] define constant for timeout result

[yasserzamani] decrease log level for timeout

[yasserzamani] add async plugin to dependency management

[yasserzamani] add showcase for async plugin

[amashchenko] Add tests for java configuration

------------------------------------------
[...truncated 1.12 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.117 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (181 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (190 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.536 s]
[INFO] Struts 2 ........................................... SUCCESS [53:24 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:43 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.267 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.463 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.178 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.253 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.200 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 55:36 min
[INFO] Finished at: 2018-03-22T23:59:18Z
[INFO] Final Memory: 72M/1946M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #52

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/52/display/redirect?page=changes>

Changes:

[burton] Added requiredValue to Checkbox Struts Tag as a parameter.  When

[burton] Change Checkbox tag parameter from requiredValue to submitUnchecked

[amashchenko] WW-4928 Using the same default value delimiter for system properties

[burton] Change Checkbox tag parameter submitUnchecked default value to "false"

[burton] Fix broken tests due to checkbox submitUnchecked default value change

[amashchenko] WW-4865 Change submitUnchecked type to Boolean

------------------------------------------
[...truncated 1.16 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.119 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (12 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (13 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.814 s]
[INFO] Struts 2 ........................................... SUCCESS [53:19 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:56 min]
[INFO] Struts Plugins ..................................... SUCCESS [  2.849 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  2.936 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.694 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  4.937 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  2.666 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 55:36 min
[INFO] Finished at: 2018-03-25T23:23:58Z
[INFO] Final Memory: 72M/1957M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #53

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/53/display/redirect?page=changes>

Changes:

[lukaszlenart] Uses proper parent's version

------------------------------------------
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on H34 (ubuntu xenial) in workspace <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/>
 > git rev-parse --is-inside-work-tree # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
Resetting working tree
 > git reset --hard # timeout=10
 > git clean -fdx # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/refs/heads/master^{commit} # timeout=10
Checking out Revision 05829e3faadd15cfa67eb234cd1775f2b98918cb (refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 05829e3faadd15cfa67eb234cd1775f2b98918cb
Commit message: "Uses proper parent's version"
 > git rev-list --no-walk 8eced2493cd0a910cb843c9819997007f723c2e1 # timeout=10
[locks-and-latches] Checking to see if we really have the locks
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK7-dependency-check] $ /bin/bash -xe /tmp/jenkins6574170202161692248.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials
[INFO] Struts 2
[INFO] Struts 2 Core
[INFO] Struts Plugins
[INFO] Struts 2 Configuration Browser Plugin
[INFO] Struts 2 Sitemesh Plugin
[INFO] Struts 2 Tiles Plugin
[INFO] Struts 2 DWR Plugin
[INFO] Struts 2 Spring Plugin
[INFO] Struts 2 Convention Plugin
[INFO] Struts 2 JUnit Plugin
[INFO] Struts 2 JSON Plugin
[INFO] Struts 2 Bean Validation Plugin
[INFO] Struts 2 Async Plugin
[INFO] Struts 2 Webapps
[INFO] Struts 2 Showcase Webapp
[INFO] Struts 2 REST Plugin
[INFO] Struts 2 Rest Showcase Webapp
[INFO] Struts 2 CDI Plugin
[INFO] Struts 2 Embedded JSP Plugin
[INFO] Struts 2 GXP Plugin
[INFO] Struts 2 Jasper Reports Plugin
[INFO] Struts 2 Java Templates Plugin
[INFO] Struts 2 JFreeChart Plugin
[INFO] Struts 2 OSGi Plugin
[INFO] Struts 2 OVal Plugin
[INFO] Struts 2 Pell Multipart Plugin
[INFO] Struts 2 Plexus Plugin
[INFO] Struts 2 Portlet Plugin
[INFO] Struts 2 Portlet Tiles Plugin
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin
[INFO] Struts 2 TestNG Plugin
[INFO] Struts OSGi Bundles
[INFO] Struts 2 OSGi Admin Bundle
[INFO] Struts 2 OSGi Demo Bundle
[INFO] Struts 2 Assembly
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-parent ---
[INFO] 57 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-parent ---
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[WARNING] Unable to download the NVD CVE data; the results may not include the most recent CPE/CVEs from the NVD.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[ERROR] IO Exception: HEAD request returned a non-200 status code
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[ERROR] IO Exception: HEAD request returned a non-200 status code
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[INFO] Finished Version Filter Analyzer (0 seconds)
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[ERROR] IO Exception: HEAD request returned a non-200 status code
[INFO] Finished Hint Analyzer (0 seconds)
[ERROR] IO Exception: GET request returned a non-200 status code
[INFO] Created CPE Index (17 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (17 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (18 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.863 s]
[INFO] Struts 2 ........................................... FAILURE [ 24.959 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 29.021 s
[INFO] Finished at: 2018-04-01T22:28:45Z
[INFO] Final Memory: 41M/1963M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] Unable to download the NVD CVE data.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #54

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/54/display/redirect>

------------------------------------------
[...truncated 1.25 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.108 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (11 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (43 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.239 s]
[INFO] Struts 2 ........................................... SUCCESS [31:43 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:46 min]
[INFO] Struts Plugins ..................................... SUCCESS [  2.823 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  2.809 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.984 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  5.098 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  2.764 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 33:51 min
[INFO] Finished at: 2018-04-05T23:24:34Z
[INFO] Final Memory: 65M/1934M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #55

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/55/display/redirect>

------------------------------------------
[...truncated 1.14 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.128 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (174 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (176 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.630 s]
[INFO] Struts 2 ........................................... SUCCESS [14:41 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:04 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.757 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.830 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.929 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.875 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.494 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 17:16 min
[INFO] Finished at: 2018-04-08T22:46:38Z
[INFO] Final Memory: 70M/1932M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #56

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/56/display/redirect>

------------------------------------------
[...truncated 1.06 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.127 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (264 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (264 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.950 s]
[INFO] Struts 2 ........................................... SUCCESS [30:13 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:19 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.904 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.256 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  6.293 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  8.699 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  5.004 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 33:07 min
[INFO] Finished at: 2018-04-12T23:54:23Z
[INFO] Final Memory: 62M/1920M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #57

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/57/display/redirect>

------------------------------------------
[...truncated 1.13 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.099 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (199 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (198 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.270 s]
[INFO] Struts 2 ........................................... SUCCESS [44:16 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:52 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.162 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.510 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.162 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.308 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.557 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 46:36 min
[INFO] Finished at: 2018-04-15T23:14:59Z
[INFO] Final Memory: 69M/1859M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #58

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/58/display/redirect>

------------------------------------------
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on H24 (ubuntu xenial) in workspace <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/>
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts.git
 > git init <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/> # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
ERROR: Error cloning remote repo 'origin'
hudson.plugins.git.GitException: Command "git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*" returned status code 128:
stdout:
stderr: remote: Counting objects: 134341, done.        
remote: Compressing objects:   0% (1/45398)           remote: Compressing objects:   1% (454/45398)           remote: Compressing objects:   2% (908/45398)           remote: Compressing objects:   3% (1362/45398)           remote: Compressing objects:   4% (1816/45398)           remote: Compressing objects:   5% (2270/45398)           remote: Compressing objects:   6% (2724/45398)           remote: Compressing objects:   7% (3178/45398)           remote: Compressing objects:   8% (3632/45398)           remote: Compressing objects:   9% (4086/45398)           remote: Compressing objects:  10% (4540/45398)           remote: Compressing objects:  11% (4994/45398)           remote: Compressing objects:  12% (5448/45398)           remote: Compressing objects:  13% (5902/45398)           remote: Compressing objects:  14% (6356/45398)           remote: Compressing objects:  15% (6810/45398)           remote: Compressing objects:  16% (7264/45398)           remote: Compressing objects:  17% (7718/45398)           remote: Compressing objects:  18% (8172/45398)           remote: Compressing objects:  19% (8626/45398)           remote: Compressing objects:  20% (9080/45398)           remote: Compressing objects:  21% (9534/45398)           remote: Compressing objects:  22% (9988/45398)           remote: Compressing objects:  23% (10442/45398)           remote: Compressing objects:  24% (10896/45398)           remote: Compressing objects:  25% (11350/45398)           remote: Compressing objects:  26% (11804/45398)           remote: Compressing objects:  27% (12258/45398)           remote: Compressing objects:  28% (12712/45398)           remote: Compressing objects:  29% (13166/45398)           remote: Compressing objects:  30% (13620/45398)           remote: Compressing objects:  31% (14074/45398)           remote: Compressing objects:  32% (14528/45398)           remote: Compressing objects:  33% (14982/45398)           remote: Compressing objects:  34% (15436/45398)           remote: Compressing objects:  35% (15890/45398)           remote: Compressing objects:  36% (16344/45398)           remote: Compressing objects:  37% (16798/45398)           remote: Compressing objects:  38% (17252/45398)           remote: Compressing objects:  39% (17706/45398)           remote: Compressing objects:  40% (18160/45398)           remote: Compressing objects:  41% (18614/45398)           remote: Compressing objects:  42% (19068/45398)           remote: Compressing objects:  43% (19522/45398)           remote: Compressing objects:  44% (19976/45398)           remote: Compressing objects:  45% (20430/45398)           remote: Compressing objects:  46% (20884/45398)           remote: Compressing objects:  47% (21338/45398)           remote: Compressing objects:  48% (21792/45398)           remote: Compressing objects:  49% (22246/45398)           remote: Compressing objects:  50% (22699/45398)           remote: Compressing objects:  51% (23153/45398)           remote: Compressing objects:  52% (23607/45398)           remote: Compressing objects:  53% (24061/45398)           remote: Compressing objects:  54% (24515/45398)           remote: Compressing objects:  55% (24969/45398)           remote: Compressing objects:  56% (25423/45398)           remote: Compressing objects:  57% (25877/45398)           remote: Compressing objects:  58% (26331/45398)           remote: Compressing objects:  59% (26785/45398)           remote: Compressing objects:  60% (27239/45398)           remote: Compressing objects:  61% (27693/45398)           remote: Compressing objects:  62% (28147/45398)           remote: Compressing objects:  63% (28601/45398)           remote: Compressing objects:  64% (29055/45398)           remote: Compressing objects:  65% (29509/45398)           remote: Compressing objects:  66% (29963/45398)           remote: Compressing objects:  67% (30417/45398)           remote: Compressing objects:  68% (30871/45398)           remote: Compressing objects:  69% (31325/45398)           remote: Compressing objects:  70% (31779/45398)           remote: Compressing objects:  71% (32233/45398)           remote: Compressing objects:  72% (32687/45398)           remote: Compressing objects:  73% (33141/45398)           remote: Compressing objects:  74% (33595/45398)           remote: Compressing objects:  75% (34049/45398)           remote: Compressing objects:  76% (34503/45398)           remote: Compressing objects:  77% (34957/45398)           remote: Compressing objects:  78% (35411/45398)           remote: Compressing objects:  79% (35865/45398)           remote: Compressing objects:  80% (36319/45398)           remote: Compressing objects:  81% (36773/45398)           remote: Compressing objects:  82% (37227/45398)           remote: Compressing objects:  83% (37681/45398)           remote: Compressing objects:  84% (38135/45398)           remote: Compressing objects:  85% (38589/45398)           remote: Compressing objects:  86% (39043/45398)           remote: Compressing objects:  87% (39497/45398)           remote: Compressing objects:  88% (39951/45398)           remote: Compressing objects:  89% (40405/45398)           remote: Compressing objects:  90% (40859/45398)           remote: Compressing objects:  91% (41313/45398)           remote: Compressing objects:  92% (41767/45398)           remote: Compressing objects:  93% (42221/45398)           remote: Compressing objects:  94% (42675/45398)           remote: Compressing objects:  95% (43129/45398)           remote: Compressing objects:  96% (43583/45398)           remote: Compressing objects:  97% (44037/45398)           remote: Compressing objects:  98% (44491/45398)           remote: Compressing objects:  99% (44945/45398)           remote: Compressing objects: 100% (45398/45398)           remote: Compressing objects: 100% (45398/45398), done.        
Receiving objects:   0% (1/134341)   Receiving objects:   1% (1344/134341)   Receiving objects:   2% (2687/134341)   Receiving objects:   3% (4031/134341)   Receiving objects:   4% (5374/134341)   Receiving objects:   5% (6718/134341)   Receiving objects:   6% (8061/134341)   Receiving objects:   7% (9404/134341)   Receiving objects:   8% (10748/134341)   Receiving objects:   9% (12091/134341)   Receiving objects:  10% (13435/134341)   Receiving objects:  11% (14778/134341)   Receiving objects:  12% (16121/134341)   Receiving objects:  13% (17465/134341)   Receiving objects:  14% (18808/134341)   Receiving objects:  15% (20152/134341)   Receiving objects:  16% (21495/134341)   Receiving objects:  17% (22838/134341)   Receiving objects:  18% (24182/134341)   Receiving objects:  19% (25525/134341)   Receiving objects:  20% (26869/134341)   Receiving objects:  21% (28212/134341)   Receiving objects:  22% (29556/134341)   Receiving objects:  23% (30899/134341)   Receiving objects:  24% (32242/134341)   Receiving objects:  25% (33586/134341)   Receiving objects:  26% (34929/134341)   Receiving objects:  27% (36273/134341)   Receiving objects:  28% (37616/134341)   Receiving objects:  29% (38959/134341)   Receiving objects:  30% (40303/134341)   Receiving objects:  31% (41646/134341)   Receiving objects:  32% (42990/134341)   Receiving objects:  33% (44333/134341)   Receiving objects:  34% (45676/134341)   Receiving objects:  35% (47020/134341)   Receiving objects:  36% (48363/134341)   Receiving objects:  37% (49707/134341)   Receiving objects:  38% (51050/134341)   Receiving objects:  39% (52393/134341)   Receiving objects:  40% (53737/134341)   Receiving objects:  41% (55080/134341)   Receiving objects:  42% (56424/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  43% (57767/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  44% (59111/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  45% (60454/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  46% (61797/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  47% (63141/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  48% (64484/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  49% (65828/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  50% (67171/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  51% (68514/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  52% (69858/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  53% (71201/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  54% (72545/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  55% (73888/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  56% (75231/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  57% (76575/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  58% (77918/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  59% (79262/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  60% (80605/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  61% (81949/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  62% (83292/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  63% (84635/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  64% (85979/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  65% (87322/134341), 5.37 MiB | 10.73 MiB/s   Receiving objects:  66% (88666/134341), 5.37 MiB | 10.73 MiB/s   fatal: write error: No space left on device
fatal: index-pack failed

        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1996)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:1715)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.access$300(CliGitAPIImpl.java:72)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:405)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl$2.execute(CliGitAPIImpl.java:614)
        at org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$1.call(RemoteGitImpl.java:153)
        at org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$1.call(RemoteGitImpl.java:146)
        at hudson.remoting.UserRequest.perform(UserRequest.java:207)
        at hudson.remoting.UserRequest.perform(UserRequest.java:53)
        at hudson.remoting.Request$2.run(Request.java:358)
        at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java.lang.Thread.run(Thread.java:748)
        Suppressed: hudson.remoting.Channel$CallSiteStackTrace: Remote call to H24
                at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1693)
                at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
                at hudson.remoting.Channel.call(Channel.java:908)
                at org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler.execute(RemoteGitImpl.java:146)
                at sun.reflect.GeneratedMethodAccessor1247.invoke(Unknown Source)
                at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                at java.lang.reflect.Method.invoke(Method.java:498)
                at org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler.invoke(RemoteGitImpl.java:132)
                at com.sun.proxy.$Proxy147.execute(Unknown Source)
                at hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1120)
                at hudson.plugins.git.GitSCM.checkout(GitSCM.java:1160)
                at hudson.scm.SCM.checkout(SCM.java:495)
                at hudson.model.AbstractProject.checkout(AbstractProject.java:1202)
                at hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:574)
                at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
                at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:499)
                at hudson.model.Run.execute(Run.java:1724)
                at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
                at hudson.model.ResourceController.execute(ResourceController.java:97)
                at hudson.model.Executor.run(Executor.java:429)
ERROR: Error cloning remote repo 'origin'
Retrying after 10 seconds
 > git rev-parse --is-inside-work-tree # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
ERROR: Error fetching remote repo 'origin'
hudson.plugins.git.GitException: Failed to fetch from https://gitbox.apache.org/repos/asf/struts.git
        at hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:862)
        at hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1129)
        at hudson.plugins.git.GitSCM.checkout(GitSCM.java:1160)
        at hudson.scm.SCM.checkout(SCM.java:495)
        at hudson.model.AbstractProject.checkout(AbstractProject.java:1202)
        at hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:574)
        at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
        at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:499)
        at hudson.model.Run.execute(Run.java:1724)
        at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
        at hudson.model.ResourceController.execute(ResourceController.java:97)
        at hudson.model.Executor.run(Executor.java:429)
Caused by: hudson.plugins.git.GitException: Command "git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git" returned status code 4:
stdout:
stderr: error: failed to write new configuration file <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/.git/config.lock>

        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1996)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1964)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1960)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommand(CliGitAPIImpl.java:1597)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommand(CliGitAPIImpl.java:1609)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.setRemoteUrl(CliGitAPIImpl.java:1243)
        at hudson.plugins.git.GitAPI.setRemoteUrl(GitAPI.java:160)
        at sun.reflect.GeneratedMethodAccessor41.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:922)
        at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:896)
        at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:853)
        at hudson.remoting.UserRequest.perform(UserRequest.java:207)
        at hudson.remoting.UserRequest.perform(UserRequest.java:53)
        at hudson.remoting.Request$2.run(Request.java:358)
        at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java.lang.Thread.run(Thread.java:748)
        Suppressed: hudson.remoting.Channel$CallSiteStackTrace: Remote call to H24
                at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1693)
                at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
                at hudson.remoting.Channel.call(Channel.java:908)
                at hudson.remoting.RemoteInvocationHandler.invoke(RemoteInvocationHandler.java:281)
                at com.sun.proxy.$Proxy110.setRemoteUrl(Unknown Source)
                at org.jenkinsci.plugins.gitclient.RemoteGitImpl.setRemoteUrl(RemoteGitImpl.java:295)
                at hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:850)
                at hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1129)
                at hudson.plugins.git.GitSCM.checkout(GitSCM.java:1160)
                at hudson.scm.SCM.checkout(SCM.java:495)
                at hudson.model.AbstractProject.checkout(AbstractProject.java:1202)
                at hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:574)
                at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
                at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:499)
                at hudson.model.Run.execute(Run.java:1724)
                at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
                at hudson.model.ResourceController.execute(ResourceController.java:97)
                at hudson.model.Executor.run(Executor.java:429)
ERROR: Error fetching remote repo 'origin'
Retrying after 10 seconds
 > git rev-parse --is-inside-work-tree # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
ERROR: Error fetching remote repo 'origin'
hudson.plugins.git.GitException: Failed to fetch from https://gitbox.apache.org/repos/asf/struts.git
        at hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:862)
        at hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1129)
        at hudson.plugins.git.GitSCM.checkout(GitSCM.java:1160)
        at hudson.scm.SCM.checkout(SCM.java:495)
        at hudson.model.AbstractProject.checkout(AbstractProject.java:1202)
        at hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:574)
        at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
        at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:499)
        at hudson.model.Run.execute(Run.java:1724)
        at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
        at hudson.model.ResourceController.execute(ResourceController.java:97)
        at hudson.model.Executor.run(Executor.java:429)
Caused by: hudson.plugins.git.GitException: Command "git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git" returned status code 4:
stdout:
stderr: error: failed to write new configuration file <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/.git/config.lock>

        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1996)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1964)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1960)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommand(CliGitAPIImpl.java:1597)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommand(CliGitAPIImpl.java:1609)
        at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.setRemoteUrl(CliGitAPIImpl.java:1243)
        at hudson.plugins.git.GitAPI.setRemoteUrl(GitAPI.java:160)
        at sun.reflect.GeneratedMethodAccessor41.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:922)
        at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:896)
        at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:853)
        at hudson.remoting.UserRequest.perform(UserRequest.java:207)
        at hudson.remoting.UserRequest.perform(UserRequest.java:53)
        at hudson.remoting.Request$2.run(Request.java:358)
        at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java.lang.Thread.run(Thread.java:748)
        Suppressed: hudson.remoting.Channel$CallSiteStackTrace: Remote call to H24
                at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1693)
                at hudson.remoting.UserResponse.retrieve(UserRequest.java:310)
                at hudson.remoting.Channel.call(Channel.java:908)
                at hudson.remoting.RemoteInvocationHandler.invoke(RemoteInvocationHandler.java:281)
                at com.sun.proxy.$Proxy110.setRemoteUrl(Unknown Source)
                at org.jenkinsci.plugins.gitclient.RemoteGitImpl.setRemoteUrl(RemoteGitImpl.java:295)
                at hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:850)
                at hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1129)
                at hudson.plugins.git.GitSCM.checkout(GitSCM.java:1160)
                at hudson.scm.SCM.checkout(SCM.java:495)
                at hudson.model.AbstractProject.checkout(AbstractProject.java:1202)
                at hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:574)
                at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
                at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:499)
                at hudson.model.Run.execute(Run.java:1724)
                at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
                at hudson.model.ResourceController.execute(ResourceController.java:97)
                at hudson.model.Executor.run(Executor.java:429)
ERROR: Error fetching remote repo 'origin'


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #59

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/59/display/redirect?page=changes>

Changes:

[burton] Added requiredValue to Checkbox Struts Tag as a parameter.  When

[burton] Change Checkbox tag parameter from requiredValue to submitUnchecked

[amashchenko] WW-4875 Add ability to use Java based configuration

[amashchenko] WW-4875 Add location information for java based configuration

[yasser.zamani] WW-4874 Introduces Servlet3 plugin by adding support for async action

[aleksandr.7m] replace String.valueOf with Objects.toString to better handle null

[aleksandr.7m] WW-4875 Add convention constant configuration

[aleksandr.7m] WW-4875 Add json constant configuration

[aleksandr.7m] Make ConventionConstantConfig inherit map of constants from

[aleksandr.7m] WW-4875 Add rest constant configuration

[yasser.zamani] WW-4874 Refactors technology name, servlet3, to asset name, async

[yasser.zamani] WW-4874 Adds unit tests

[yasser.zamani] WW-4874 Updates parent version

[aleksandr.7m] WW-4875 Add spring constant configuration

[yasserzamani] WW-4874 Renames local variable inv to invocation

[yasserzamani] define constant for timeout result

[yasserzamani] decrease log level for timeout

[yasserzamani] add async plugin to dependency management

[yasserzamani] add showcase for async plugin

[zhouyanming] Align OptGroup with Select

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (add commons-text

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace

[amashchenko] WW-4915 Replace deprecated commons-lang3 classes (replace

[yasserzamani] fix java.net.JarURLConnection#parseSpecs

[yasserzamani] comment jira issue id and fix a few typos

[yasserzamani] replace sun.net.www.ParseUtil#decode

[lukaszlenart] Adds Jackson XML binding dependency

[lukaszlenart] Defines a new handler using Jackson XML

[lukaszlenart] Adds test to cover basic functionality

[lukaszlenart] Adds example how to use the handler

[lukaszlenart] Upgrades OWASP Dependency Check plugin to the latest version and reduces

[yasserzamani] fix javadoc to being consistent with WW-3915 changes

[paul.zepernick] WW-4923 Null check to avoid NPE when not passing a JDBC connection to

[lukaszlenart] Cleans up suppression file and uses full path

[lukaszlenart] Fixes suppression file

[yasserzamani] add test if connection close after result

[yasserzamani] initialize session

[lukaszlenart] Adds explanation how to use the commented configuration

[yasserzamani] make newly added methods protected to allow users to override them

[github] fix location with full path of resource

[lukaszlenart] [maven-release-plugin] prepare release STRUTS_2_5_16

[lukaszlenart] [maven-release-plugin] prepare for next development iteration

[amashchenko] WW-685 Add class to hold conversion related data

[amashchenko] WW-685 Add generic type conversion error message

[amashchenko] WW-685 Add tests

[amashchenko] WW-685 Fix getText expression

[github] fix two issues for ListUIBean

[github] convert supplied value to list when isn't iterable

[yasserzamani] fix list when not found in stack and so is null

[amashchenko] Add ognlAutoGrowthCollectionLimit constant to java config

[amashchenko] Add tests for java configuration

[amashchenko] WW-4928 Using the same default value delimiter for system properties

[burton] Change Checkbox tag parameter submitUnchecked default value to "false"

[burton] Fix broken tests due to checkbox submitUnchecked default value change

[amashchenko] WW-4865 Change submitUnchecked type to Boolean

[lukaszlenart] Uses proper parent's version

------------------------------------------
[...truncated 1.16 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.114 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (249 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (204 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.338 s]
[INFO] Struts 2 ........................................... SUCCESS [56:15 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:43 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.449 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.486 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.051 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.743 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.354 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 58:26 min
[INFO] Finished at: 2018-04-22T23:26:48Z
[INFO] Final Memory: 69M/1870M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #60

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/60/display/redirect?page=changes>

Changes:

[lukaszlenart] Upgrades dependencies to Servlet API 2.5 and JSP API 2.1

[lukaszlenart] Uses proper headers in web.xml

[lukaszlenart] Implements missing method

[lukaszlenart] Adds missing JavaDoc

[lukaszlenart] Moves tests to proper package and adds one more test case

------------------------------------------
[...truncated 1.15 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.135 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (174 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (184 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.436 s]
[INFO] Struts 2 ........................................... SUCCESS [37:40 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:43 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.220 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.346 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.241 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.554 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.022 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 39:51 min
[INFO] Finished at: 2018-04-26T23:08:41Z
[INFO] Final Memory: 71M/1955M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #61

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/61/display/redirect>

------------------------------------------
[...truncated 1.09 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.097 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (193 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (213 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.269 s]
[INFO] Struts 2 ........................................... SUCCESS [58:20 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:41 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.660 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.621 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.458 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.356 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.364 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 01:00 h
[INFO] Finished at: 2018-04-29T23:28:48Z
[INFO] Final Memory: 69M/1951M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #62

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/62/display/redirect?page=changes>

Changes:

[lukaszlenart] Uses OGNL without #context magical key

[lukaszlenart] Adjusts OGNL usage to avoid modify immutable context

[lukaszlenart] Uses OGNL 3.2.2 which always requires MemberAccess

[lukaszlenart] Reuses existing context instead of creating a new MemberAccess each time

[lukaszlenart] Reformats code

[lukaszlenart] Adds empty line

[lukaszlenart] Upgrades to the latest OGNL 3.2.4 version

[lukaszlenart] Upgrades to OGNL 3.2.5

[lukaszlenart] Adds a test to cover missing access to #context

[lukaszlenart] Drops unused TypeConverter

[lukaszlenart] Removes unused imports

[lukaszlenart] Cleans up code a bit

[lukaszlenart] Reverts the previous access state of the method

------------------------------------------
[...truncated 1.14 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.17 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (22 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (3 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (4 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (20 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (1 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.173 s]
[INFO] Struts 2 ........................................... SUCCESS [02:26 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:53 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.575 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.720 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.960 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.135 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  3.654 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:50 min
[INFO] Finished at: 2018-05-03T22:45:01Z
[INFO] Final Memory: 72M/1983M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

12