dependency-check / dependency-check/azuredevops

Dependency Report not updated

Open
#164 0 comments 1 reaction 0 assignees View on GitHub
bug help wanted
Dominant language
TypeScript
Stars
53
Forks
35
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
The dependency report being published does not find vulnerabilities. However when I run the dependencyCheck CLI listed in the build output on machine the vulnerabilities are found

I have multi projects all using the same build machine that all use Azure DevOps tasks. Sometimes the build will create the correct dependency report, and sometimes not.

```
- task: dependency-check-build-task@6
inputs:
dependencyCheckVersion: '8.0.0'
projectName: 'CA'
scanPath: '$(system.defaultworkingdirectory)/ca'
format: 'ALL'
reportsDirectory: '$(Agent.TempDirectory)/dependency-scan-results/CA'
additionalArguments: '--format HTML --format JSON --format XML'
```

The dependency-check-build-task output looks like:

```
Associated artifact 60198 with build 88902
Async Command End: Upload Artifact
Async Command Start: Upload Artifact
Uploading 1 files
Max dedup parallelism: 192
Building file tree
Uploaded 0 out of 132,849 bytes.
Uploaded 132,849 out of 132,849 bytes.
Associating files
Total files: 1 ---- Associated files: 0 (0%)
File upload succeed.
Upload '/home/azdevops/myagent-04/_work/_temp/dependency-scan-results/CA/dependency-check-report.html' to file container: '#/25883364/dependency-check'
Associated artifact 60198 with build 88902
Async Command End: Upload Artifact
Async Command Start: Upload Artifact
Uploading 1 files
Max dedup parallelism: 192
Building file tree
Uploaded 0 out of 2,417 bytes.
Uploaded 2,417 out of 2,417 bytes.
Associating files
Total files: 1 ---- Associated files: 0 (0%)
File upload succeed.
Upload '/home/azdevops/myagent-04/_work/_temp/dependency-scan-results/CA/dependency-check-report.json' to file container: '#/25883364/dependency-check'
Associated artifact 60198 with build 88902
Async Command End: Upload Artifact
Async Command Start: Upload Artifact
Uploading 1 files
Max dedup parallelism: 192
Building file tree
Uploaded 0 out of 2,227 bytes.
Uploaded 2,227 out of 2,227 bytes.
Associating files
Total files: 1 ---- Associated files: 0 (0%)
File upload succeed.
Upload '/home/azdevops/myagent-04/_work/_temp/dependency-scan-results/CA/dependency-check-report.sarif' to file container: '#/25883364/dependency-check'
Associated artifact 60198 with build 88902
Async Command End: Upload Artifact
Async Command Start: Upload Artifact
Uploading 1 files
Max dedup parallelism: 192
Building file tree
Uploaded 0 out of 2,245 bytes.
Uploaded 2,245 out of 2,245 bytes.
Associating files
Total files: 1 ---- Associated files: 0 (0%)
File upload succeed.
Upload '/home/azdevops/myagent-04/_work/_temp/dependency-scan-results/CA/dependency-check-report.xml' to file container: '#/25883364/dependency-check'
Associated artifact 60198 with build 88902
Async Command End: Upload Artifact
Finishing: dependencycheckbuildtask
```

Artificats are listed:
![image](https://github.com/dependency-check/azuredevops/assets/46571235/20cf2a8c-2266-44a9-a81b-6e11248935f3)

But no vulernablities listed
![image](https://github.com/dependency-check/azuredevops/assets/46571235/f641b270-6c18-4bfc-bf29-f85f3fd306fb)

Any advice on how to trouble is appreciated.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.