Build failed in Jenkins: Struts-master-JDK7-dependency-check #43

classic Classic list List threaded Threaded
50 messages Options
123
Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #63

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/63/display/redirect>

------------------------------------------
[...truncated 1.14 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.1 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (230 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (222 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.358 s]
[INFO] Struts 2 ........................................... SUCCESS [56:03 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:43 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.405 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.628 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.237 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  5.800 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.044 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 58:14 min
[INFO] Finished at: 2018-05-06T23:27:21Z
[INFO] Final Memory: 70M/1945M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #64

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/64/display/redirect>

------------------------------------------
[...truncated 1.13 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.144 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (297 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (304 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.778 s]
[INFO] Struts 2 ........................................... SUCCESS [31:38 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:29 min]
[INFO] Struts Plugins ..................................... SUCCESS [  5.368 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.618 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  6.794 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  8.921 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  5.197 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 34:44 min
[INFO] Finished at: 2018-05-10T23:58:54Z
[INFO] Final Memory: 69M/1895M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #65

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/65/display/redirect>

------------------------------------------
[...truncated 1.13 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.1 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (210 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (190 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.396 s]
[INFO] Struts 2 ........................................... SUCCESS [19:49 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:44 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.040 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.572 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  4.942 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  5.846 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  3.880 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 22:00 min
[INFO] Finished at: 2018-05-13T22:50:15Z
[INFO] Final Memory: 66M/1860M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #66

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/66/display/redirect?page=changes>

Changes:

[loomchild] Adds sorted and navigable set support JSON plugin

[loomchild] Adds deque and queue support JSON plugin

------------------------------------------
[...truncated 1.04 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.108 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (182 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (216 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.587 s]
[INFO] Struts 2 ........................................... SUCCESS [02:25 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:53 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.977 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.768 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.005 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.762 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.183 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:48 min
[INFO] Finished at: 2018-05-17T22:33:05Z
[INFO] Final Memory: 63M/1821M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #67

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/67/display/redirect?page=changes>

Changes:

[yasserzamani] upgrade Tiles to 3.0.8

------------------------------------------
[...truncated 1.12 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.104 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (182 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (182 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.691 s]
[INFO] Struts 2 ........................................... SUCCESS [02:16 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:45 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.140 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.277 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.041 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.816 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.021 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:30 min
[INFO] Finished at: 2018-05-20T22:32:45Z
[INFO] Final Memory: 79M/1903M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #68

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/68/display/redirect?page=changes>

Changes:

[yasserzamani] honor .properties file before the generic parametrics

[stefaan.dutry] drop searchValueStack attribute from the s:text tag

[stefaan.dutry] drop deprecated logging layer

[stefaan.dutry] remove TimerInterceptor

[stefaan.dutry] remove ObjectProfiler

[stefaan.dutry] remove UtilTimerStack

[stefaan.dutry] fix RestActionInvocation

[stefaan.dutry] remove ProfilingTimerBean

[stefaan.dutry] further clean up after rmoving profiling layer

[stefaan.dutry] update commons-beanutils dependency to version 1.9.3

------------------------------------------
[...truncated 1.28 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.182 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (189 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (165 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.000 s]
[INFO] Struts 2 ........................................... SUCCESS [38:28 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:01 min]
[INFO] Struts Plugins ..................................... SUCCESS [  5.416 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.552 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.880 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.496 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.697 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 41:03 min
[INFO] Finished at: 2018-05-24T23:28:40Z
[INFO] Final Memory: 64M/1907M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #69

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/69/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.1 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (207 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (207 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.361 s]
[INFO] Struts 2 ........................................... SUCCESS [49:08 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:39 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.121 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.235 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  4.983 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.025 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.014 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 51:14 min
[INFO] Finished at: 2018-05-27T23:19:46Z
[INFO] Final Memory: 69M/1937M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #70

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/70/display/redirect?page=changes>

Changes:

[stefaan.dutry] remove deprecated XWork constants

[stefaan.dutry] fix broken tests.

[stefaan.dutry] fix constant used for addition accepted patterns

[stefaan.dutry] fix order, and therefore value, of the builder constants

[stefaan.dutry] fix test by fixing config constant name

[stefaan.dutry] fix tests by fixing constantnames

[stefaan.dutry] update Apache FreeMarker to version 2.3.28

[stefaan.dutry] drop convertIfExist method

[yasserzamani] delete unused local variable timerKey

------------------------------------------
[...truncated 1.28 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.131 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (18 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (15 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.318 s]
[INFO] Struts 2 ........................................... SUCCESS [07:26 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:02 min]
[INFO] Struts Plugins ..................................... SUCCESS [  3.405 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.291 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  4.212 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  5.185 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  2.979 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 09:54 min
[INFO] Finished at: 2018-05-31T22:38:51Z
[INFO] Final Memory: 72M/1896M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #71

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/71/display/redirect?page=changes>

Changes:

[amashchenko] Remove deprecated exceptions

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.102 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (224 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (224 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.906 s]
[INFO] Struts 2 ........................................... SUCCESS [26:29 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:44 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.362 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.531 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.576 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.830 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.339 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 28:43 min
[INFO] Finished at: 2018-06-03T22:57:03Z
[INFO] Final Memory: 67M/1926M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #72

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/72/display/redirect>

------------------------------------------
[...truncated 1.24 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.17 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (141 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (16 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (18 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (165 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.974 s]
[INFO] Struts 2 ........................................... SUCCESS [15:39 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:09 min]
[INFO] Struts Plugins ..................................... SUCCESS [  5.178 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.189 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [ 13.484 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [ 23.628 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.619 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 18:45 min
[INFO] Finished at: 2018-06-07T22:47:48Z
[INFO] Final Memory: 72M/1881M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #73

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/73/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.108 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (215 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (223 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.728 s]
[INFO] Struts 2 ........................................... SUCCESS [49:50 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:55 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.186 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.424 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.077 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.463 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.095 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 52:13 min
[INFO] Finished at: 2018-06-10T23:20:46Z
[INFO] Final Memory: 69M/1947M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #74

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/74/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.119 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (224 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (199 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.224 s]
[INFO] Struts 2 ........................................... SUCCESS [02:50 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:00 min]
[INFO] Struts Plugins ..................................... SUCCESS [  5.172 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.752 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.883 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.371 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.378 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 05:25 min
[INFO] Finished at: 2018-06-15T06:07:54Z
[INFO] Final Memory: 63M/1909M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #75

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/75/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.103 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (232 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (224 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.627 s]
[INFO] Struts 2 ........................................... SUCCESS [02:29 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:44 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.294 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.558 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.211 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.437 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.274 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:42 min
[INFO] Finished at: 2018-06-18T06:24:30Z
[INFO] Final Memory: 71M/1880M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #76

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/76/display/redirect?page=changes>

Changes:

[ssullivan] add 'sun.misc.' to struts.excludedPackageNames

[ssullivan] WW-4769 add unit tests to verify immutable collections

[ssullivan] add unit test for Dispatcher init()

[ssullivan] add 'com.opensymphony.xwork2.ognl.' to excludedPackageNames

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.121 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (207 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (190 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.998 s]
[INFO] Struts 2 ........................................... SUCCESS [02:21 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:47 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.142 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.704 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.388 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.449 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.096 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:40 min
[INFO] Finished at: 2018-06-22T10:31:27Z
[INFO] Final Memory: 66M/1894M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #77

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/77/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.124 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (222 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (198 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.022 s]
[INFO] Struts 2 ........................................... SUCCESS [02:16 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:04 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.612 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.567 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.657 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.155 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.517 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:51 min
[INFO] Finished at: 2018-06-25T02:08:08Z
[INFO] Final Memory: 78M/1870M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #78

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/78/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.104 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (199 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (232 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.336 s]
[INFO] Struts 2 ........................................... SUCCESS [02:27 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:55 min]
[INFO] Struts Plugins ..................................... SUCCESS [  5.066 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.602 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.480 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.668 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.268 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:54 min
[INFO] Finished at: 2018-06-28T22:33:19Z
[INFO] Final Memory: 71M/1942M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #79

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/79/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.106 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (207 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (199 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.589 s]
[INFO] Struts 2 ........................................... SUCCESS [02:25 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:46 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.262 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.905 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.278 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.383 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.284 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:40 min
[INFO] Finished at: 2018-07-01T22:32:56Z
[INFO] Final Memory: 70M/1915M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #80

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/80/display/redirect>

------------------------------------------
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on H27 (ubuntu xenial) in workspace <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/>
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts.git
 > git init <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/> # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
No valid HEAD. Skipping the resetting
 > git clean -fdx # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/refs/heads/master^{commit} # timeout=10
Checking out Revision 9a860679d09d01df00092097417198d5f313ea70 (refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 9a860679d09d01df00092097417198d5f313ea70
Commit message: "Merge pull request #236 from sullis/DispatcherTest-init"
 > git rev-list --no-walk 9a860679d09d01df00092097417198d5f313ea70 # timeout=10
[locks-and-latches] Checking to see if we really have the locks
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK7-dependency-check] $ /bin/bash -xe /tmp/jenkins6319608541244334488.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials
[INFO] Struts 2
[INFO] Struts 2 Core
[INFO] Struts Plugins
[INFO] Struts 2 Configuration Browser Plugin
[INFO] Struts 2 Sitemesh Plugin
[INFO] Struts 2 Tiles Plugin
[INFO] Struts 2 DWR Plugin
[INFO] Struts 2 Spring Plugin
[INFO] Struts 2 Convention Plugin
[INFO] Struts 2 JUnit Plugin
[INFO] Struts 2 JSON Plugin
[INFO] Struts 2 Bean Validation Plugin
[INFO] Struts 2 Async Plugin
[INFO] Struts 2 Webapps
[INFO] Struts 2 Showcase Webapp
[INFO] Struts 2 REST Plugin
[INFO] Struts 2 Rest Showcase Webapp
[INFO] Struts 2 CDI Plugin
[INFO] Struts 2 Embedded JSP Plugin
[INFO] Struts 2 GXP Plugin
[INFO] Struts 2 Jasper Reports Plugin
[INFO] Struts 2 Java Templates Plugin
[INFO] Struts 2 JFreeChart Plugin
[INFO] Struts 2 OSGi Plugin
[INFO] Struts 2 OVal Plugin
[INFO] Struts 2 Pell Multipart Plugin
[INFO] Struts 2 Plexus Plugin
[INFO] Struts 2 Portlet Plugin
[INFO] Struts 2 Portlet Tiles Plugin
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin
[INFO] Struts 2 TestNG Plugin
[INFO] Struts OSGi Bundles
[INFO] Struts 2 OSGi Admin Bundle
[INFO] Struts 2 OSGi Demo Bundle
[INFO] Struts 2 Assembly
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-parent ---
[INFO] 57 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-parent ---
Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-core/3.1.1/dependency-check-core-3.1.1.pom
Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-utils/3.1.1/dependency-check-utils-3.1.1.pom
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.878 s]
[INFO] Struts 2 ........................................... FAILURE [  3.082 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 6.786 s
[INFO] Finished at: 2018-07-05T22:31:45Z
[INFO] Final Memory: 59M/1963M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-parent: Execution default of goal org.owasp:dependency-check-maven:3.1.1:check failed: Plugin org.owasp:dependency-check-maven:3.1.1 or one of its dependencies could not be resolved: Failed to collect dependencies at org.owasp:dependency-check-maven:jar:3.1.1 -> org.owasp:dependency-check-core:jar:3.1.1: Failed to read artifact descriptor for org.owasp:dependency-check-core:jar:3.1.1: Could not transfer artifact org.owasp:dependency-check-core:pom:3.1.1 from/to central (https://repo.maven.apache.org/maven2): Received fatal alert: protocol_version -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #81

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/81/display/redirect>

------------------------------------------
[...truncated 1.23 MB...]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 18 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/classes>
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 4 source files to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/test-classes>
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.104 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 26 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/tiles/target/struts2-tiles-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (215 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 1 source file to <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java> uses unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/main/java/org/apache/struts2/validators/DWRValidator.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin ---
[WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org]
[INFO]
[INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence.
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/plugins/dwr/target/struts2-dwr-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin ---
[INFO]
[INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (224 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin:

dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.579 s]
[INFO] Struts 2 ........................................... SUCCESS [46:29 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:52 min]
[INFO] Struts Plugins ..................................... SUCCESS [  4.789 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.644 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.402 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.206 s]
[INFO] Struts 2 DWR Plugin ................................ FAILURE [  4.896 s]
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 48:50 min
[INFO] Finished at: 2018-07-08T23:17:05Z
[INFO] Final Memory: 64M/1852M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-dwr-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK7-dependency-check #82

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/82/display/redirect>

------------------------------------------
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on ubuntu-4 (ubuntu trusty) in workspace <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/>
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts.git
 > git init <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/> # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
No valid HEAD. Skipping the resetting
 > git clean -fdx # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/refs/heads/master^{commit} # timeout=10
Checking out Revision 9a860679d09d01df00092097417198d5f313ea70 (refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 9a860679d09d01df00092097417198d5f313ea70
Commit message: "Merge pull request #236 from sullis/DispatcherTest-init"
 > git rev-list --no-walk 9a860679d09d01df00092097417198d5f313ea70 # timeout=10
[locks-and-latches] Checking to see if we really have the locks
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK7-dependency-check] $ /bin/bash -xe /tmp/jenkins5067856684695052253.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials
[INFO] Struts 2
[INFO] Struts 2 Core
[INFO] Struts Plugins
[INFO] Struts 2 Configuration Browser Plugin
[INFO] Struts 2 Sitemesh Plugin
[INFO] Struts 2 Tiles Plugin
[INFO] Struts 2 DWR Plugin
[INFO] Struts 2 Spring Plugin
[INFO] Struts 2 Convention Plugin
[INFO] Struts 2 JUnit Plugin
[INFO] Struts 2 JSON Plugin
[INFO] Struts 2 Bean Validation Plugin
[INFO] Struts 2 Async Plugin
[INFO] Struts 2 Webapps
[INFO] Struts 2 Showcase Webapp
[INFO] Struts 2 REST Plugin
[INFO] Struts 2 Rest Showcase Webapp
[INFO] Struts 2 CDI Plugin
[INFO] Struts 2 Embedded JSP Plugin
[INFO] Struts 2 GXP Plugin
[INFO] Struts 2 Jasper Reports Plugin
[INFO] Struts 2 Java Templates Plugin
[INFO] Struts 2 JFreeChart Plugin
[INFO] Struts 2 OSGi Plugin
[INFO] Struts 2 OVal Plugin
[INFO] Struts 2 Pell Multipart Plugin
[INFO] Struts 2 Plexus Plugin
[INFO] Struts 2 Portlet Plugin
[INFO] Struts 2 Portlet Tiles Plugin
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin
[INFO] Struts 2 TestNG Plugin
[INFO] Struts OSGi Bundles
[INFO] Struts 2 OSGi Admin Bundle
[INFO] Struts 2 OSGi Demo Bundle
[INFO] Struts 2 Assembly
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building Struts 2 2.6-SNAPSHOT
[INFO] ------------------------------------------------------------------------
Downloading from central: https://repo.maven.apache.org/maven2/org/owasp/dependency-check-maven/3.1.1/dependency-check-maven-3.1.1.pom
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.923 s]
[INFO] Struts 2 ........................................... FAILURE [  1.271 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 6.835 s
[INFO] Finished at: 2018-07-12T22:28:33Z
[INFO] Final Memory: 49M/1963M
[INFO] ------------------------------------------------------------------------
[ERROR] Plugin org.owasp:dependency-check-maven:3.1.1 or one of its dependencies could not be resolved: Failed to read artifact descriptor for org.owasp:dependency-check-maven:jar:3.1.1: Could not transfer artifact org.owasp:dependency-check-maven:pom:3.1.1 from/to central (https://repo.maven.apache.org/maven2): Received fatal alert: protocol_version -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

123