Fix the Trivy test for `pinot-orc`
Open
- Dominant language
- Java
- Stars
- 6.1k
- Forks
- 1.5k
- Avg merge
- 2d 55m
- Merged PRs (30d)
- 182
Description
https://github.com/apache/pinot/pull/10037/checks?check_run_id=10316587317
It looks that the existing pinot-orc package has some library dependency that contains some security concerns. We should check the dependency graph and check if the version bump would fix the issue.
```
net.minidev:json-smart
org.apache.hadoop:hadoop-common
com.fasterxml.woodstox:woodstox-core
```
Contributor guide
Assessment
This issue has not been assessed yet.