Build failed in Jenkins: Struts-master-JDK8-dependency-check #193

classic Classic list List threaded Threaded
23 messages Options
12
Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #193

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/193/display/redirect>

------------------------------------------
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on H39 (ubuntu xenial) in workspace <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/>
No credentials specified
Cloning the remote Git repository
Cloning repository https://gitbox.apache.org/repos/asf/struts.git
 > git init <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/> # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
No valid HEAD. Skipping the resetting
 > git clean -fdx # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/refs/heads/master^{commit} # timeout=10
Checking out Revision 570f8c3e67001c17b5fa6049945f187dd40c6696 (refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 570f8c3e67001c17b5fa6049945f187dd40c6696
Commit message: "fix compilation error of WW-4999 cherry picks"
 > git rev-list --no-walk 570f8c3e67001c17b5fa6049945f187dd40c6696 # timeout=10
[locks-and-latches] Checking to see if we really have the locks
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins4096798954568307181.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=256m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[ERROR] Unable to resolve domain 'nvd.nist.gov'
[WARNING] Unable to download the NVD CVE data; the results may not include the most recent CPE/CVEs from the NVD.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (28 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (28 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (28 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.658 s]
[INFO] Struts 2 ........................................... FAILURE [ 35.898 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  42.590 s
[INFO] Finished at: 2019-08-01T07:54:56Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] Unable to download the NVD CVE data.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #194

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/194/display/redirect>

------------------------------------------
[...truncated 1.57 KB...]
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins5036598024573161685.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2004  (2779 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - Modified  (3040 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2006  (3496 ms)
[INFO] Download Complete for NVD CVE - 2007  (3501 ms)
[INFO] Processing Started for NVD CVE - 2007
[INFO] Processing Started for NVD CVE - 2006
[INFO] Download Complete for NVD CVE - 2015  (3725 ms)
[INFO] Processing Started for NVD CVE - 2015
[INFO] Download Complete for NVD CVE - 2009  (3790 ms)
[INFO] Download Complete for NVD CVE - 2008  (4013 ms)
[INFO] Download Complete for NVD CVE - 2005  (4085 ms)
[INFO] Download Complete for NVD CVE - 2012  (4180 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Processing Started for NVD CVE - 2012
[INFO] Download Complete for NVD CVE - 2016  (4451 ms)
[INFO] Download Complete for NVD CVE - 2013  (4469 ms)
[INFO] Download Complete for NVD CVE - 2014  (4489 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Processing Started for NVD CVE - 2008
[INFO] Download Complete for NVD CVE - 2010  (4706 ms)
[WARNING] Download Failed for NVD CVE - 2018
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[WARNING] An exception occurred downloading NVD CVE - 2014
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2013
Some CVEs may not be reported.
[INFO] Download Complete for NVD CVE - 2011  (5408 ms)
[WARNING] An exception occurred downloading NVD CVE - 2016
Some CVEs may not be reported.
[WARNING] Download Failed for NVD CVE - 2019
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[INFO] Download Complete for NVD CVE - 2017  (8330 ms)
[WARNING] An exception occurred downloading NVD CVE - 2011
Some CVEs may not be reported.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[WARNING] An exception occurred downloading NVD CVE - 2010
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2017
Some CVEs may not be reported.
[INFO] Created CPE Index (54 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (54 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (55 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.847 s]
[INFO] Struts 2 ........................................... FAILURE [01:20 min]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:27 min
[INFO] Finished at: 2019-08-04T07:55:46Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #195

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/195/display/redirect>

------------------------------------------
[...truncated 694.75 KB...]
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (9 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.169 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.254 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.106 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.139 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.016 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.246 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.181 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.189 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.006 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (7 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.8.jar (cpe:/a:fasterxml:jackson:2.9.8, cpe:/a:fasterxml:jackson-databind:2.9.8, com.fasterxml.jackson.core:jackson-databind:2.9.8) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12086, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.404 s]
[INFO] Struts 2 ........................................... SUCCESS [15:18 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:32 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  2.672 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  2.841 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.413 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  4.201 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  2.776 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  3.982 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [  9.254 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [  6.871 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [  8.400 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  5.550 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  6.111 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  3.085 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [ 54.226 s]
[INFO] Struts 2 REST Plugin ............................... FAILURE [  6.366 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  18:55 min
[INFO] Finished at: 2019-08-08T08:54:31Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-databind-2.9.8.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #196

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/196/display/redirect>

------------------------------------------
[...truncated 1.50 KB...]
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins6369003424952073258.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Complete for NVD CVE - Modified  (1675 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2005  (2143 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2004  (2301 ms)
[INFO] Download Complete for NVD CVE - 2012  (2552 ms)
[INFO] Download Complete for NVD CVE - 2007  (2716 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Processing Started for NVD CVE - 2012
[INFO] Processing Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2009  (2940 ms)
[INFO] Download Complete for NVD CVE - 2015  (3085 ms)
[INFO] Download Complete for NVD CVE - 2008  (3118 ms)
[INFO] Download Complete for NVD CVE - 2010  (3289 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Download Complete for NVD CVE - 2006  (3578 ms)
[INFO] Download Complete for NVD CVE - 2014  (3758 ms)
[INFO] Download Complete for NVD CVE - 2013  (3952 ms)
[INFO] Download Complete for NVD CVE - 2016  (4369 ms)
[INFO] Processing Started for NVD CVE - 2006
[INFO] Processing Started for NVD CVE - 2010
[INFO] Download Complete for NVD CVE - 2019  (4846 ms)
[INFO] Download Complete for NVD CVE - 2011  (4942 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Processing Started for NVD CVE - 2015
[WARNING] Download Failed for NVD CVE - 2018
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Download Complete for NVD CVE - 2017  (5586 ms)
[WARNING] An exception occurred downloading NVD CVE - 2017
Some CVEs may not be reported.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[WARNING] An exception occurred downloading NVD CVE - 2011
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2019
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2016
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2014
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2013
Some CVEs may not be reported.
[INFO] Created CPE Index (52 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (53 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (53 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  7.538 s]
[INFO] Struts 2 ........................................... FAILURE [01:16 min]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:28 min
[INFO] Finished at: 2019-08-11T07:55:37Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #197

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/197/display/redirect>

------------------------------------------
[...truncated 1.50 KB...]
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins7602173931272036867.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Complete for NVD CVE - 2003  (1710 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Complete for NVD CVE - Modified  (1807 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2004  (2225 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - 2006  (2664 ms)
[INFO] Download Complete for NVD CVE - 2008  (2942 ms)
[INFO] Download Complete for NVD CVE - 2002  (2986 ms)
[INFO] Download Complete for NVD CVE - 2009  (3288 ms)
[INFO] Download Complete for NVD CVE - 2005  (3342 ms)
[INFO] Download Complete for NVD CVE - 2012  (3399 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Processing Started for NVD CVE - 2006
[INFO] Processing Started for NVD CVE - 2002
[INFO] Download Complete for NVD CVE - 2007  (3498 ms)
[INFO] Download Complete for NVD CVE - 2015  (3508 ms)
[INFO] Download Complete for NVD CVE - 2014  (3565 ms)
[INFO] Download Complete for NVD CVE - 2013  (3630 ms)
[INFO] Download Complete for NVD CVE - 2011  (4331 ms)
[INFO] Download Complete for NVD CVE - 2010  (4334 ms)
[INFO] Processing Started for NVD CVE - 2013
[INFO] Processing Started for NVD CVE - 2014
[INFO] Processing Started for NVD CVE - 2015
[INFO] Processing Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2016  (4841 ms)
[INFO] Processing Started for NVD CVE - 2012
[INFO] Processing Started for NVD CVE - 2009
[INFO] Processing Started for NVD CVE - 2005
[INFO] Processing Started for NVD CVE - 2016
[INFO] Processing Started for NVD CVE - 2010
[INFO] Processing Started for NVD CVE - 2011
[INFO] Download Complete for NVD CVE - 2017  (5758 ms)
[WARNING] Download Failed for NVD CVE - 2019
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[INFO] Download Complete for NVD CVE - 2018  (7292 ms)
[INFO] Processing Started for NVD CVE - 2018
[INFO] Processing Started for NVD CVE - 2017
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (45 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (46 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (46 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  7.168 s]
[INFO] Struts 2 ........................................... FAILURE [01:12 min]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:23 min
[INFO] Finished at: 2019-08-15T07:55:32Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #198

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/198/display/redirect>

------------------------------------------
[...truncated 1.57 KB...]
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins6311897248211466682.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2003  (1844 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Complete for NVD CVE - 2007  (2448 ms)
[INFO] Download Complete for NVD CVE - Modified  (2668 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Processing Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2005  (3616 ms)
[INFO] Download Complete for NVD CVE - 2004  (3694 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2006  (4001 ms)
[INFO] Download Complete for NVD CVE - 2016  (4380 ms)
[INFO] Download Complete for NVD CVE - 2002  (4505 ms)
[INFO] Download Complete for NVD CVE - 2010  (4697 ms)
[INFO] Download Complete for NVD CVE - 2013  (4932 ms)
[WARNING] Download Failed for NVD CVE - 2017
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Download Failed for NVD CVE - 2018
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[INFO] Download Complete for NVD CVE - 2012  (6425 ms)
[INFO] Download Complete for NVD CVE - 2019  (7295 ms)
[INFO] Download Complete for NVD CVE - 2009  (7430 ms)
[INFO] Download Complete for NVD CVE - 2015  (7987 ms)
[INFO] Download Complete for NVD CVE - 2014  (8130 ms)
[INFO] Download Complete for NVD CVE - 2011  (8172 ms)
[INFO] Download Complete for NVD CVE - 2008  (8413 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Processing Started for NVD CVE - 2008
[INFO] Processing Started for NVD CVE - 2011
[INFO] Processing Started for NVD CVE - 2015
[INFO] Processing Started for NVD CVE - 2009
[INFO] Processing Started for NVD CVE - 2014
[INFO] Processing Started for NVD CVE - 2019
[INFO] Processing Started for NVD CVE - 2012
[INFO] Processing Started for NVD CVE - 2013
[INFO] Processing Started for NVD CVE - 2010
[INFO] Processing Started for NVD CVE - 2002
[INFO] Processing Started for NVD CVE - 2016
[INFO] Processing Started for NVD CVE - 2006
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (58 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (59 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (59 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  4.243 s]
[INFO] Struts 2 ........................................... FAILURE [01:33 min]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:40 min
[INFO] Finished at: 2019-08-18T07:55:48Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #199

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/199/display/redirect>

------------------------------------------
[...truncated 1.95 KB...]
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins6732631129040022281.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Complete for NVD CVE - 2003  (1758 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Complete for NVD CVE - 2004  (2487 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - 2002  (2584 ms)
[INFO] Processing Started for NVD CVE - 2002
[INFO] Download Complete for NVD CVE - 2005  (2859 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2008  (3105 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Download Complete for NVD CVE - 2010  (3259 ms)
[INFO] Download Complete for NVD CVE - Modified  (3623 ms)
[INFO] Download Complete for NVD CVE - 2012  (3893 ms)
[INFO] Processing Started for NVD CVE - 2010
[INFO] Processing Started for NVD CVE - Modified
[INFO] Processing Started for NVD CVE - 2012
[INFO] Download Complete for NVD CVE - 2015  (4330 ms)
[INFO] Download Complete for NVD CVE - 2009  (4372 ms)
[INFO] Processing Started for NVD CVE - 2015
[INFO] Download Complete for NVD CVE - 2006  (4517 ms)
[INFO] Download Complete for NVD CVE - 2013  (4517 ms)
[INFO] Download Complete for NVD CVE - 2007  (4557 ms)
[INFO] Download Complete for NVD CVE - 2014  (4686 ms)
[INFO] Processing Started for NVD CVE - 2009
[WARNING] Download Failed for NVD CVE - 2018
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[INFO] Processing Started for NVD CVE - 2014
[INFO] Processing Started for NVD CVE - 2007
[INFO] Processing Started for NVD CVE - 2013
[INFO] Processing Started for NVD CVE - 2006
[INFO] Download Complete for NVD CVE - 2016  (5455 ms)
[INFO] Download Complete for NVD CVE - 2019  (5852 ms)
[INFO] Download Complete for NVD CVE - 2017  (6285 ms)
[INFO] Download Complete for NVD CVE - 2011  (6456 ms)
[INFO] Processing Started for NVD CVE - 2019
[INFO] Processing Started for NVD CVE - 2016
[INFO] Processing Started for NVD CVE - 2017
[INFO] Processing Started for NVD CVE - 2011
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (41 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (41 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (41 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  5.037 s]
[INFO] Struts 2 ........................................... FAILURE [01:04 min]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:15 min
[INFO] Finished at: 2019-08-22T09:24:17Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #200

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/200/display/redirect>

------------------------------------------
[...truncated 694.35 KB...]
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (15 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.562 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.538 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.032 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.285 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.111 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.012 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.042 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.009 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.078 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (10 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.8.jar (cpe:/a:fasterxml:jackson:2.9.8, cpe:/a:fasterxml:jackson-databind:2.9.8, com.fasterxml.jackson.core:jackson-databind:2.9.8) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12086, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  4.201 s]
[INFO] Struts 2 ........................................... SUCCESS [22:12 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:59 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  3.441 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.707 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  4.211 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  5.207 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  3.782 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  5.412 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 11.572 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [  8.570 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 10.760 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  6.873 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  4.696 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  3.859 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:03 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [  8.270 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  26:42 min
[INFO] Finished at: 2019-08-25T08:21:13Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-databind-2.9.8.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #201

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/201/display/redirect>

------------------------------------------
[...truncated 1.37 MB...]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (17 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.pom
Progress (1): 2.2/6.2 kBProgress (1): 5.0/6.2 kBProgress (1): 6.2 kB                        Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.pom (6.2 kB at 326 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-core/7.2.2/juneau-core-7.2.2.pom
Progress (1): 2.2/2.3 kBProgress (1): 2.3 kB                        Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-core/7.2.2/juneau-core-7.2.2.pom (2.3 kB at 27 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau/7.2.2/juneau-7.2.2.pom
Progress (1): 2.2/13 kBProgress (1): 5.0/13 kBProgress (1): 7.8/13 kBProgress (1): 11/13 kB Progress (1): 13 kB                      Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau/7.2.2/juneau-7.2.2.pom (13 kB at 95 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.jar
Progress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3 MB                        Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.jar (1.3 MB at 4.3 MB/s)
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.119 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.201 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.032 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.441 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.755 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.148 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.227 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.093 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.01 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (11 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.8.jar (cpe:/a:fasterxml:jackson:2.9.8, cpe:/a:fasterxml:jackson-databind:2.9.8, com.fasterxml.jackson.core:jackson-databind:2.9.8) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12086, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.122 s]
[INFO] Struts 2 ........................................... SUCCESS [05:46 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:25 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  4.787 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  4.648 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.396 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.958 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  4.633 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  6.481 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 13.752 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.063 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 12.491 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  8.385 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  5.768 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  4.403 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:14 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [ 10.721 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  11:11 min
[INFO] Finished at: 2019-08-29T08:05:33Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-databind-2.9.8.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #202

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/202/display/redirect?page=changes>

Changes:

[sehaas] Fix typo in MultiselectInterceptor javadoc

------------------------------------------
[...truncated 499.32 KB...]
        at junit.framework.TestSuite.runTest(TestSuite.java:252) [junit-4.12.jar:4.12]
        at junit.framework.TestSuite.run(TestSuite.java:247) [junit-4.12.jar:4.12]
        at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:86) [junit-4.12.jar:4.12]
        at org.junit.runners.Suite.runChild(Suite.java:128) [junit-4.12.jar:4.12]
        at org.junit.runners.Suite.runChild(Suite.java:27) [junit-4.12.jar:4.12]
        at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290) [junit-4.12.jar:4.12]
        at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71) [junit-4.12.jar:4.12]
        at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288) [junit-4.12.jar:4.12]
        at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
        at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
        at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
        at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
        at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
Sep 01, 2019 7:58:15 AM freemarker.log._JULLoggerFactory$JULLogger error
SEVERE: Error executing FreeMarker template
FreeMarker template error:
The following has evaluated to null or missing:
==> something  [in template "someFreeMarkerFile.ftl" at line 23, column 6]

----
Tip: If the failing expression is known to legally refer to something that's sometimes null or missing, either specify a default value like myOptionalVar!myDefault, or use <#if myOptionalVar??>when-present<#else>when-missing</#if>. (These only cover the last step of the expression; to cover the whole expression, use parenthesis: (myOptionalVar.foo)!myDefault, (myOptionalVar.foo)??
----

----
FTL stack trace ("~" means nesting-related):
        - Failed at: #if something  [in template "someFreeMarkerFile.ftl" at line 23, column 1]
----

Java stack trace (for programmers):
----
freemarker.core.InvalidReferenceException: [... Exception message was already printed; see it above ...]
        at freemarker.core.InvalidReferenceException.getInstance(InvalidReferenceException.java:134)
        at freemarker.core.UnexpectedTypeException.newDesciptionBuilder(UnexpectedTypeException.java:85)
        at freemarker.core.UnexpectedTypeException.<init>(UnexpectedTypeException.java:48)
        at freemarker.core.NonBooleanException.<init>(NonBooleanException.java:47)
        at freemarker.core.Expression.modelToBoolean(Expression.java:179)
        at freemarker.core.Expression.evalToBoolean(Expression.java:162)
        at freemarker.core.Expression.evalToBoolean(Expression.java:147)
        at freemarker.core.ConditionalBlock.accept(ConditionalBlock.java:48)
        at freemarker.core.Environment.visit(Environment.java:330)
        at freemarker.core.Environment.visit(Environment.java:336)
        at freemarker.core.Environment.process(Environment.java:309)
        at freemarker.template.Template.process(Template.java:384)
        at org.apache.struts2.views.freemarker.FreemarkerResult.doExecute(FreemarkerResult.java:184)
        at org.apache.struts2.result.StrutsResultSupport.execute(StrutsResultSupport.java:206)
        at org.apache.struts2.views.freemarker.FreeMarkerResultTest.testWithoutWriteIfCompleted(FreeMarkerResultTest.java:74)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at junit.framework.TestCase.runTest(TestCase.java:176)
        at junit.framework.TestCase.runBare(TestCase.java:141)
        at junit.framework.TestResult$1.protect(TestResult.java:122)
        at junit.framework.TestResult.runProtected(TestResult.java:142)
        at junit.framework.TestResult.run(TestResult.java:125)
        at junit.framework.TestCase.run(TestCase.java:129)
        at junit.framework.TestSuite.runTest(TestSuite.java:252)
        at junit.framework.TestSuite.run(TestSuite.java:247)
        at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:86)
        at org.junit.runners.Suite.runChild(Suite.java:128)
        at org.junit.runners.Suite.runChild(Suite.java:27)
        at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290)
        at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71)
        at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288)
        at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58)
        at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268)
        at org.junit.runners.ParentRunner.run(ParentRunner.java:363)
        at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55)
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137)
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107)
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83)
        at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75)
        at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158)
        at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384)
        at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345)
        at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126)
        at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418)

[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.253 s - in org.apache.struts2.views.freemarker.FreeMarkerResultTest
[INFO] Running org.apache.struts2.views.freemarker.tags.TagModelTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.077 s - in org.apache.struts2.views.freemarker.tags.TagModelTest
[INFO] Running org.apache.struts2.views.freemarker.FreemarkerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.078 s - in org.apache.struts2.views.freemarker.FreemarkerTest
[INFO] Running org.apache.struts2.views.freemarker.FreemarkerResultMockedTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.447 s - in org.apache.struts2.views.freemarker.FreemarkerResultMockedTest
[INFO] Running org.apache.struts2.views.freemarker.FreemarkerThemeTemplateLoaderTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.151 s - in org.apache.struts2.views.freemarker.FreemarkerThemeTemplateLoaderTest
[INFO] Running org.apache.struts2.views.TemplateEngineManagerTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 s - in org.apache.struts2.views.TemplateEngineManagerTest
[INFO] Running org.apache.struts2.conversion.UploadedFileConverterTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.006 s - in org.apache.struts2.conversion.UploadedFileConverterTest
[INFO] Running org.apache.struts2.RequestUtilsTest
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.003 s - in org.apache.struts2.RequestUtilsTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1879, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-core ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1587 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 1580 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-core >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-core ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-core ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-core <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-core ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-core ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (11 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (2 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (4 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Core:

commons-beanutils-1.9.3.jar (cpe:/a:apache:commons_beanutils:1.9.3, commons-beanutils:commons-beanutils:1.9.3) : CVE-2019-10086


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.372 s]
[INFO] Struts 2 ........................................... SUCCESS [01:46 min]
[INFO] Struts 2 Core ...................................... FAILURE [02:26 min]
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  04:17 min
[INFO] Finished at: 2019-09-01T07:58:27Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-core:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] commons-beanutils-1.9.3.jar: CVE-2019-10086
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #203

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/203/display/redirect?page=changes>

Changes:

[lukaszlenart] Defines a simple Docker build

[lukaszlenart] Sticks to trusty distro to check if that will solve build on JDK8

[lukaszlenart] WW-5037 Upgrades commons-beanutils to version 1.9.4

------------------------------------------
[...truncated 1.16 MB...]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (9 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.pom
Progress (1): 2.2/6.2 kBProgress (1): 5.0/6.2 kBProgress (1): 6.2 kB                        Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.pom (6.2 kB at 365 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-core/7.2.2/juneau-core-7.2.2.pom
Progress (1): 2.2/2.3 kBProgress (1): 2.3 kB                        Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-core/7.2.2/juneau-core-7.2.2.pom (2.3 kB at 165 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau/7.2.2/juneau-7.2.2.pom
Progress (1): 2.2/13 kBProgress (1): 5.0/13 kBProgress (1): 7.8/13 kBProgress (1): 11/13 kB Progress (1): 13 kB                      Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau/7.2.2/juneau-7.2.2.pom (13 kB at 720 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.jar
Progress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.1/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.2/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.3/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.4/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.5/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.6/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.7/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.8/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 0.9/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.0/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.1/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.2/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3/1.3 MBProgress (1): 1.3 MB                        Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/juneau/juneau-marshall/7.2.2/juneau-marshall-7.2.2.jar (1.3 MB at 4.9 MB/s)
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.341 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.019 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.161 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.319 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.312 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.087 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.078 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.006 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.017 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (9 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (0 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (1 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.8.jar (cpe:/a:fasterxml:jackson:2.9.8, cpe:/a:fasterxml:jackson-databind:2.9.8, com.fasterxml.jackson.core:jackson-databind:2.9.8) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12086, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.233 s]
[INFO] Struts 2 ........................................... SUCCESS [03:57 min]
[INFO] Struts 2 Core ...................................... SUCCESS [01:33 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  3.018 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  3.005 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  3.397 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  4.755 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  2.968 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  4.256 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [  9.339 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [  6.957 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [  7.918 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  5.620 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  3.817 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  3.055 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [ 55.337 s]
[INFO] Struts 2 REST Plugin ............................... FAILURE [  6.397 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  07:34 min
[INFO] Finished at: 2019-09-05T08:12:10Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-databind-2.9.8.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #204

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/204/display/redirect?page=changes>

Changes:

[github] Defines Security Policy as recommended by Github

[github] Marks 2.3.37 as still supported

[lukaszlenart] WW-5038 Upgrades jackson-databind to version 2.9.9.3 plus upgrades

[yasserzamani] Proposed WW-5035 enhancement: - Provide cache clearing methods for

[yasserzamani] WW-5033 - Update to latest versions for some Struts 2.5.x dependencies:

------------------------------------------
[...truncated 692.88 KB...]
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (12 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.121 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.216 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.034 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.463 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.811 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.155 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.24 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.091 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.01 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (13 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-dataformat-xml-2.9.9.jar (cpe:/a:fasterxml:jackson:2.9.9, com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-databind:2.9.9) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.116 s]
[INFO] Struts 2 ........................................... SUCCESS [11:51 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:24 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  5.094 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.180 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  6.013 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  6.912 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  5.067 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  6.871 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 14.274 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.154 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 13.290 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  8.729 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  6.532 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  5.171 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:13 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [  9.946 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  17:18 min
[INFO] Finished at: 2019-09-08T08:11:27Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-dataformat-xml-2.9.9.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #205

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/205/display/redirect>

------------------------------------------
[...truncated 690.64 KB...]
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (22 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (1 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (3 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.119 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.199 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.042 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.468 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.789 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.165 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.237 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.113 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.015 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (20 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-dataformat-xml-2.9.9.jar (cpe:/a:fasterxml:jackson:2.9.9, com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-databind:2.9.9) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.480 s]
[INFO] Struts 2 ........................................... SUCCESS [02:31 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:30 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  5.185 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.280 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  6.086 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.192 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  5.120 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  7.144 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 14.398 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.443 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 13.191 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  8.848 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  6.539 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  5.059 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:17 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [ 10.415 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  08:09 min
[INFO] Finished at: 2019-09-12T08:02:24Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-dataformat-xml-2.9.9.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #206

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/206/display/redirect>

------------------------------------------
[...truncated 690.64 KB...]
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (14 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.124 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.225 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.042 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.495 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.831 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.164 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.231 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.102 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.009 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (11 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-dataformat-xml-2.9.9.jar (cpe:/a:fasterxml:jackson:2.9.9, com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-databind:2.9.9) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.464 s]
[INFO] Struts 2 ........................................... SUCCESS [02:26 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:30 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  5.157 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.509 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  6.259 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.459 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  5.219 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  7.179 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 14.727 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.336 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 13.246 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  9.391 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  6.551 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  5.225 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:14 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [ 10.406 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  08:03 min
[INFO] Finished at: 2019-09-15T08:02:10Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-dataformat-xml-2.9.9.jar: CVE-2019-14379
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #207

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/207/display/redirect>

------------------------------------------
[...truncated 2.61 KB...]
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Complete for NVD CVE - 2003  (1813 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Complete for NVD CVE - Modified  (1971 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2004  (2392 ms)
[INFO] Download Complete for NVD CVE - 2005  (2602 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2002  (2763 ms)
[INFO] Processing Started for NVD CVE - 2002
[INFO] Download Complete for NVD CVE - 2012  (3134 ms)
[INFO] Download Complete for NVD CVE - 2007  (3220 ms)
[INFO] Processing Started for NVD CVE - 2007
[INFO] Processing Started for NVD CVE - 2012
[INFO] Download Complete for NVD CVE - 2014  (3550 ms)
[INFO] Download Complete for NVD CVE - 2009  (3625 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Download Complete for NVD CVE - 2013  (3869 ms)
[INFO] Download Complete for NVD CVE - 2015  (3972 ms)
[INFO] Download Complete for NVD CVE - 2010  (4060 ms)
[INFO] Download Complete for NVD CVE - 2008  (4061 ms)
[INFO] Processing Started for NVD CVE - 2014
[INFO] Download Complete for NVD CVE - 2006  (4169 ms)
[INFO] Download Complete for NVD CVE - 2016  (4605 ms)
[WARNING] Download Failed for NVD CVE - 2017
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Download Complete for NVD CVE - 2011  (5490 ms)
[WARNING] An exception occurred downloading NVD CVE - 2006
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2010
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2008
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2015
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2013
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2011
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2016
Some CVEs may not be reported.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Download Complete for NVD CVE - 2019  (7117 ms)
[INFO] Download Complete for NVD CVE - 2018  (7256 ms)
[WARNING] An exception occurred downloading NVD CVE - 2018
Some CVEs may not be reported.
[WARNING] An exception occurred downloading NVD CVE - 2019
Some CVEs may not be reported.
[INFO] Created CPE Index (42 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (43 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (43 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.480 s]
[INFO] Struts 2 ........................................... FAILURE [ 59.788 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:06 min
[INFO] Finished at: 2019-09-19T07:55:20Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #208

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/208/display/redirect>

------------------------------------------
[...truncated 1.60 KB...]
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins524129006932233059.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2003  (1719 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Complete for NVD CVE - 2004  (1898 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - Modified  (1905 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2009  (2784 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Download Complete for NVD CVE - 2006  (2901 ms)
[INFO] Download Complete for NVD CVE - 2015  (2910 ms)
[INFO] Download Complete for NVD CVE - 2002  (3042 ms)
[INFO] Processing Started for NVD CVE - 2002
[INFO] Processing Started for NVD CVE - 2006
[INFO] Processing Started for NVD CVE - 2015
[INFO] Download Complete for NVD CVE - 2005  (3427 ms)
[INFO] Download Complete for NVD CVE - 2010  (3431 ms)
[INFO] Download Complete for NVD CVE - 2012  (3491 ms)
[INFO] Processing Started for NVD CVE - 2010
[INFO] Processing Started for NVD CVE - 2012
[INFO] Download Complete for NVD CVE - 2008  (3635 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2007  (3991 ms)
[INFO] Download Complete for NVD CVE - 2014  (4012 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Download Complete for NVD CVE - 2013  (4189 ms)
[INFO] Processing Started for NVD CVE - 2014
[INFO] Processing Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2016  (4954 ms)
[INFO] Processing Started for NVD CVE - 2013
[WARNING] Download Failed for NVD CVE - 2018
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[INFO] Download Complete for NVD CVE - 2011  (5167 ms)
[INFO] Download Complete for NVD CVE - 2017  (5505 ms)
[INFO] Download Complete for NVD CVE - 2019  (5559 ms)
[INFO] Processing Started for NVD CVE - 2019
[INFO] Processing Started for NVD CVE - 2017
[INFO] Processing Started for NVD CVE - 2011
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[WARNING] An exception occurred downloading NVD CVE - 2016
Some CVEs may not be reported.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (19 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (19 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (19 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.363 s]
[INFO] Struts 2 ........................................... FAILURE [ 38.668 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  44.320 s
[INFO] Finished at: 2019-09-22T07:55:09Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #209

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/209/display/redirect>

------------------------------------------
[...truncated 694.40 KB...]
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (22 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.115 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.21 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.041 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.501 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.983 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.162 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.229 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.101 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.011 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (13 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.9.3.jar (cpe:/a:fasterxml:jackson-databind:2.9.9.3, cpe:/a:fasterxml:jackson:2.9.9.3, com.fasterxml.jackson.core:jackson-databind:2.9.9.3) : CVE-2019-16335, CVE-2019-14540
jackson-dataformat-xml-2.9.9.jar (cpe:/a:fasterxml:jackson:2.9.9, com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-databind:2.9.9) : CVE-2019-14379, CVE-2019-16335, CVE-2019-12814, CVE-2019-14439, CVE-2019-14540, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.658 s]
[INFO] Struts 2 ........................................... SUCCESS [19:11 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:24 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  4.935 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.129 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  5.926 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  7.159 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  5.063 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  6.956 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 14.326 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.549 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 13.594 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [  9.203 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  6.230 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  5.187 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:15 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [ 10.546 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  24:46 min
[INFO] Finished at: 2019-09-26T08:19:15Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-databind-2.9.9.3.jar: CVE-2019-16335, CVE-2019-14540
[ERROR] jackson-dataformat-xml-2.9.9.jar: CVE-2019-14379, CVE-2019-16335, CVE-2019-14540
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #210

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/210/display/redirect>

------------------------------------------
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on H28 (ubuntu xenial) in workspace <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/>
No credentials specified
 > git rev-parse --is-inside-work-tree # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url https://gitbox.apache.org/repos/asf/struts.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
Resetting working tree
 > git reset --hard # timeout=10
 > git clean -fdx # timeout=10
Fetching upstream changes from https://gitbox.apache.org/repos/asf/struts.git
 > git --version # timeout=10
 > git fetch --tags --progress https://gitbox.apache.org/repos/asf/struts.git +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/master^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/refs/heads/master^{commit} # timeout=10
Checking out Revision 9453e05559731a4f20e720fa268e25c0040b80c0 (refs/remotes/origin/master)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 9453e05559731a4f20e720fa268e25c0040b80c0
Commit message: "WW-5033 - Update to latest versions for some Struts 2.5.x dependencies: (#362)"
 > git rev-list --no-walk 9453e05559731a4f20e720fa268e25c0040b80c0 # timeout=10
[locks-and-latches] Checking to see if we really have the locks
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins430044404808970335.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2007.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2006.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2011.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2009.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2008.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2015.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-Modified.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2018.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2016.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2003.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2013.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2012.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2010.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2014.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2004.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2019.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2002.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2017.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2005.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[WARNING] Unable to download the NVD CVE data; the results may not include the most recent CPE/CVEs from the NVD.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[ERROR] IO Exception connecting to https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2007.xml.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (23 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (23 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (23 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  3.436 s]
[INFO] Struts 2 ........................................... FAILURE [ 32.410 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  39.341 s
[INFO] Finished at: 2019-09-29T07:55:23Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] Unable to download the NVD CVE data.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #211

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/211/display/redirect?page=changes>

Changes:

[43964333+JCgH4164838Gh792C124B5] Merge pull request #354 from JCgH4164838Gh792C124B5/localS2_25x_B10

[43964333+JCgH4164838Gh792C124B5] Merge pull request #366 from

[43964333+JCgH4164838Gh792C124B5] Merge pull request #367 from


------------------------------------------
[...truncated 1.55 KB...]
[locks-and-latches] Have all the locks, build can start
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
[Struts-master-JDK8-dependency-check] $ /bin/bash -xe /tmp/jenkins7158728427111203667.sh
+ export 'MAVEN_OPTS=-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ MAVEN_OPTS='-Xms2g -Xmx2g -XX:MaxPermSize=512m -XX:+CMSClassUnloadingEnabled'
+ /home/jenkins/tools/maven/latest3//bin/mvn verify -Pdependency-check
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] Struts 2 Bill of Materials                                         [pom]
[INFO] Struts 2                                                           [pom]
[INFO] Struts 2 Core                                                      [jar]
[INFO] Struts 2 Plugins                                                   [pom]
[INFO] Struts 2 Configuration Browser Plugin                              [jar]
[INFO] Struts 2 Sitemesh Plugin                                           [jar]
[INFO] Struts 2 Tiles Plugin                                              [jar]
[INFO] Struts 2 DWR Plugin                                                [jar]
[INFO] Struts 2 Spring Plugin                                             [jar]
[INFO] Struts 2 Convention Plugin                                         [jar]
[INFO] Struts 2 JUnit Plugin                                              [jar]
[INFO] Struts 2 JSON Plugin                                               [jar]
[INFO] Struts 2 Bean Validation Plugin                                    [jar]
[INFO] Struts 2 Async Plugin                                              [jar]
[INFO] Struts 2 Webapps                                                   [pom]
[INFO] Struts 2 Showcase Webapp                                           [war]
[INFO] Struts 2 REST Plugin                                               [jar]
[INFO] Struts 2 Rest Showcase Webapp                                      [war]
[INFO] Struts 2 CDI Plugin                                                [jar]
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin                           [jar]
[INFO] Struts 2 GXP Plugin                                                [jar]
[INFO] Struts 2 Jasper Reports Plugin                                     [jar]
[INFO] Struts 2 Java Templates Plugin                                     [jar]
[INFO] Struts 2 JFreeChart Plugin                                         [jar]
[INFO] Struts 2 OSGi Plugin                                               [jar]
[INFO] Struts 2 OVal Plugin                                               [jar]
[INFO] Struts 2 Pell Multipart Plugin                                     [jar]
[INFO] Struts 2 Plexus Plugin                                             [jar]
[INFO] Struts 2 Portlet Plugin                                            [jar]
[INFO] Struts 2 Portlet Tiles Plugin                                      [jar]
[INFO] Struts 2 TestNG Plugin                                             [jar]
[INFO] Struts 2 OSGi Bundles                                              [pom]
[INFO] Struts 2 OSGi Admin Bundle                                      [bundle]
[INFO] Struts 2 OSGi Demo Bundle                                       [bundle]
[INFO] Struts 2 Assembly                                                  [pom]
[INFO]
[INFO] -------------------< org.apache.struts:struts2-bom >--------------------
[INFO] Building Struts 2 Bill of Materials 2.6-SNAPSHOT                  [1/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-bom ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-bom ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-bom ---
[INFO] No site descriptor found: nothing to attach.
[INFO]
[INFO] ------------------< org.apache.struts:struts2-parent >------------------
[INFO] Building Struts 2 2.6-SNAPSHOT                                    [2/35]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-parent ---
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-parent ---
[WARNING] Ignoring project type pom - supportedProjectTypes = [jar, bundle]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-parent ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Parsing exclusions from <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/.gitignore>
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 88 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 3 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 3 licenses.
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-parent >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-parent ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-parent ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-parent <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-parent ---
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-parent ---
[INFO] Attaching 'src/site/site.xml' site descriptor with classifier 'site'.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-parent ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Started for NVD CVE - 2006
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Started for NVD CVE - 2009
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Started for NVD CVE - 2012
[INFO] Download Started for NVD CVE - 2014
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Started for NVD CVE - 2017
[INFO] Download Started for NVD CVE - 2018
[INFO] Download Started for NVD CVE - 2019
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2003  (2024 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Complete for NVD CVE - 2004  (2110 ms)
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - 2006  (2129 ms)
[INFO] Processing Started for NVD CVE - 2006
[INFO] Download Complete for NVD CVE - 2002  (2235 ms)
[INFO] Processing Started for NVD CVE - 2002
[INFO] Download Complete for NVD CVE - 2005  (2339 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2014  (2475 ms)
[INFO] Download Complete for NVD CVE - 2007  (2529 ms)
[INFO] Download Complete for NVD CVE - 2015  (2538 ms)
[INFO] Processing Started for NVD CVE - 2015
[INFO] Processing Started for NVD CVE - 2014
[INFO] Processing Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2016  (2679 ms)
[INFO] Processing Started for NVD CVE - 2016
[INFO] Download Complete for NVD CVE - 2012  (2804 ms)
[INFO] Download Complete for NVD CVE - 2009  (2831 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Processing Started for NVD CVE - 2012
[INFO] Download Complete for NVD CVE - 2013  (3027 ms)
[INFO] Download Complete for NVD CVE - 2008  (3057 ms)
[INFO] Download Complete for NVD CVE - 2011  (3345 ms)
[INFO] Download Complete for NVD CVE - Modified  (3363 ms)
[INFO] Download Complete for NVD CVE - 2010  (3889 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Processing Started for NVD CVE - 2013
[INFO] Processing Started for NVD CVE - 2010
[INFO] Processing Started for NVD CVE - Modified
[INFO] Processing Started for NVD CVE - 2011
[INFO] Download Complete for NVD CVE - 2019  (4242 ms)
[INFO] Download Complete for NVD CVE - 2017  (4357 ms)
[INFO] Processing Started for NVD CVE - 2017
[INFO] Processing Started for NVD CVE - 2019
[WARNING] Download Failed for NVD CVE - 2018
Some CVEs may not be reported.
[INFO] If you are behind a proxy you may need to configure dependency-check to use the proxy.
[WARNING] Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[INFO] Analysis Started
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (21 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (21 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (21 seconds)
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.662 s]
[INFO] Struts 2 ........................................... FAILURE [ 47.986 s]
[INFO] Struts 2 Core ...................................... SKIPPED
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  50.948 s
[INFO] Finished at: 2019-10-03T08:01:41Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-parent: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during dependency-check analysis
[ERROR] The download was interrupted; unable to complete the update
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :struts2-parent
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Build failed in Jenkins: Struts-master-JDK8-dependency-check #212

Apache Jenkins Server-2
See <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/212/display/redirect>

Changes:


------------------------------------------
[...truncated 724.79 KB...]
[INFO]
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- jetty-maven-plugin:8.1.16.v20140903:stop (stop-jetty) @ struts2-showcase ---
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-showcase ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (24 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (3 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 Showcase Webapp:

tiles-ognl-3.0.8.jar (cpe:/a:ognl_project:ognl:3.0.8, cpe:/a:apache:tiles:3.0.8, org.apache.tiles:tiles-ognl:3.0.8) : CVE-2016-3093
sitemesh-2.4.2.jar (cpe:/a:mesh_project:mesh:2.4.2, opensymphony:sitemesh:2.4.2) : CVE-2018-10769


See the dependency-check report for more details.


[INFO]
[INFO] --- maven-failsafe-plugin:2.22.1:verify (verify) @ struts2-showcase ---
[INFO]
[INFO] ---------------< org.apache.struts:struts2-rest-plugin >----------------
[INFO] Building Struts 2 REST Plugin 2.6-SNAPSHOT                       [17/35]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 4 resources
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:compile (default-compile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 24 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Some input files use or override a deprecated API.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/main/java/org/apache/struts2/rest/handler/AbstractContentTypeHandler.java>: Recompile with -Xlint:deprecation for details.
[INFO]
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ struts2-rest-plugin ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/resources>
[INFO] Copying 3 resources
[INFO]
[INFO] --- maven-compiler-plugin:3.7.0:testCompile (default-testCompile) @ struts2-rest-plugin ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 11 source files to <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/test-classes>
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Some input files use unchecked or unsafe operations.
[INFO] <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/src/test/java/org/apache/struts2/rest/handler/Contact.java>: Recompile with -Xlint:unchecked for details.
[INFO]
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ struts2-rest-plugin ---
[INFO]
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
[INFO] Running org.apache.struts2.rest.RestWorkflowInterceptorTest
ERROR StatusLogger Log4j2 could not find a logging implementation. Please add log4j-core to the classpath. Using SimpleLogger to log to the console...
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.148 s - in org.apache.struts2.rest.RestWorkflowInterceptorTest
[INFO] Running org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.228 s - in org.apache.struts2.rest.DefaultHttpHeadersTest
[INFO] Running org.apache.struts2.rest.RestActionMapperTest
[INFO] Tests run: 26, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.04 s - in org.apache.struts2.rest.RestActionMapperTest
[INFO] Running org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.431 s - in org.apache.struts2.rest.handler.JacksonJsonHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.357 s - in org.apache.struts2.rest.handler.JuneauXmlHandlerTest
[INFO] Running org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.152 s - in org.apache.struts2.rest.handler.JacksonXmlHandlerTest
[INFO] Running org.apache.struts2.rest.RestActionInvocationTest
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.237 s - in org.apache.struts2.rest.RestActionInvocationTest
[INFO] Running org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.113 s - in org.apache.struts2.rest.DefaultContentTypeHandlerManagerTest
[INFO] Running org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.011 s - in org.apache.struts2.rest.ContentTypeHandlerManagerTest
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 68, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO]
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-rest-plugin ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: Jenkinsfile
[INFO] Exclude: src/main/groovy/Jenkinsfile.gdsl
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 39 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 38 licenses.
[INFO]
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-rest-plugin >>>
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce) @ struts2-rest-plugin ---
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M2:enforce (enforce-maven-version) @ struts2-rest-plugin ---
[INFO]
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-rest-plugin <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-rest-plugin ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK8-dependency-check/ws/plugins/rest/target/struts2-rest-plugin-2.6-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-rest-plugin ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO]
[INFO] --- dependency-check-maven:4.0.2:check (default) @ struts2-rest-plugin ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (17 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)
[WARNING]

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.9.3.jar (cpe:/a:fasterxml:jackson-databind:2.9.9.3, cpe:/a:fasterxml:jackson:2.9.9.3, com.fasterxml.jackson.core:jackson-databind:2.9.9.3) : CVE-2019-16335, CVE-2019-14540
jackson-dataformat-xml-2.9.9.jar (cpe:/a:fasterxml:jackson:2.9.9, com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.9.9, cpe:/a:fasterxml:jackson-databind:2.9.9) : CVE-2019-14379, CVE-2019-16335, CVE-2019-12814, CVE-2019-14439, CVE-2019-14540, CVE-2019-12384


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  2.209 s]
[INFO] Struts 2 ........................................... SUCCESS [30:58 min]
[INFO] Struts 2 Core ...................................... SUCCESS [02:54 min]
[INFO] Struts 2 Plugins ................................... SUCCESS [  5.188 s]
[INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [  5.725 s]
[INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [  6.993 s]
[INFO] Struts 2 Tiles Plugin .............................. SUCCESS [  8.949 s]
[INFO] Struts 2 DWR Plugin ................................ SUCCESS [  5.293 s]
[INFO] Struts 2 Spring Plugin ............................. SUCCESS [  7.878 s]
[INFO] Struts 2 Convention Plugin ......................... SUCCESS [ 16.866 s]
[INFO] Struts 2 JUnit Plugin .............................. SUCCESS [ 11.887 s]
[INFO] Struts 2 JSON Plugin ............................... SUCCESS [ 14.752 s]
[INFO] Struts 2 Bean Validation Plugin .................... SUCCESS [ 10.447 s]
[INFO] Struts 2 Async Plugin .............................. SUCCESS [  6.560 s]
[INFO] Struts 2 Webapps ................................... SUCCESS [  5.017 s]
[INFO] Struts 2 Showcase Webapp ........................... SUCCESS [01:27 min]
[INFO] Struts 2 REST Plugin ............................... FAILURE [ 12.958 s]
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  37:25 min
[INFO] Finished at: 2019-10-06T08:33:26Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:4.0.2:check (default) on project struts2-rest-plugin:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
[ERROR]
[ERROR] jackson-databind-2.9.9.3.jar: CVE-2019-16335, CVE-2019-14540
[ERROR] jackson-dataformat-xml-2.9.9.jar: CVE-2019-14379, CVE-2019-16335, CVE-2019-14540
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :struts2-rest-plugin
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

12