jfrog / jfrog/jfrog-cli-security
Execution failed for task ':generateDepTrees' using jf audit command for gradle project.
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Describe the bug
I get the error Execution failed for task ':generateDepTrees' using the jf audit command in some gradle projects. I tried with Jfrog CLI version from 2.55.0 to 2.67.0 (from other issues looks to be since 2.36.1 version), and I get the same error. The error looks to be with generateDepTrees plugin, since I tried only executing the plugin and the same error appears.
Current behavior
10:19:52 [Debug] JFrog CLI version: 2.67.0
10:19:52 [Debug] OS/Arch: linux/amd64
10:19:52 [Debug] Trace ID for JFrog Platform logs: 84c73eca43d1b8a1
10:19:52 [Debug] Sending HTTP GET request to: https://<artifactory-server>/xsc/api/v1/system/version
10:19:53 [π΅Info] Log path: /home/ubuntu/.jfrog/logs/jfrog-cli.2024-09-10.10-19-53.11851.log
π¬The βjf auditβ command also supports JFrog Advanced Security features, such as 'Contextual Analysis', 'Secret Detection', 'IaC Scan' and βSASTβ.
This feature isn't enabled on your system. Read more - https://jfrog.com/xray/
Vulnerable Dependencies
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β π§ Couldn't determine a package manager or build tool used by this project π§ β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
10:20:28 [Debug] Sending an error report to JFrog analytics...
10:20:28 [Debug] Sending HTTP GET request to: https://<artifactory-server>/xsc/api/v1/system/version
10:20:29 [Debug] failed to check availability of Xsc service:server response: 404 Not Found
{
"errors": [
{
"status": 404,
"message": "Not Found"
}
]
}
Reporting to JFrog analytics is skipped...
10:20:29 [π΅Info] Trace ID for JFrog Platform logs: 84c73eca43d1b8a1
10:20:29 [π¨Error] audit command in '<path/to/project>' failed:
failed while building 'gradle' dependency tree:
error running gradle-dep-tree: exit status 1
FAILURE: Build failed with an exception.
* What went wrong:
Execution failed for task ':generateDepTrees'.
> java.util.ConcurrentModificationException (no error message)
* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.
* Get more help at https://help.gradle.org
BUILD FAILED in 1s
Reproduction steps
No response
Expected behavior
No response
JFrog CLI-Security version
Jfrog CLI version from 2.55.0 to 2.67.0 (from other issues looks to be since 2.36.1 version)
JFrog CLI version (if applicable)
No response
Operating system type and version
Ubuntu 20.04.6 LTS
JFrog Xray version
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up β it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the failure with the jf audit command in an affected Gradle project and run the generateDepTrees task directly. Inspect the linked gradle-dep-tree plugin and collect the stack trace to identify the cause of the ConcurrentModificationException. Done means dependency auditing completes successfully for the affected project.
Written by the indexing model from the issue text.
Assessment
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100