jfrog / jfrog/jfrog-cli-security
jf audit - Maven Multi-module not detected correctly
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Describe the bug
I'm not sure if this is intentional or not, but the JSON output from 2.34.0 to 2.36.1 changed at some point and doesn't display the correct package_type anymore (and different structure).
Current behavior
Single component named "root" with "Generic" as the package type.
What it used to be:
Multiple components with their module name and "Maven" as their package type.
Reproduction steps
- Run a scan with JFrog CLI 2.36.0 on a multi-module maven project
- Run a scan with JFrog CLI 2.36.1 on a multi-module maven project
- Compare the outputs
Expected behavior
Either one of:
- Singular
scan_idwith thecomponent_idmatching the name of the root project andpackage_typemaven.- Not sure how it should handle projects with mixed languages however.
- Multiple
scan_idwith each modules withpackage_typemaven.
JFrog CLI version
2.36.1
Operating system type and version
Docker
JFrog Artifactory version
No response
JFrog Xray version
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file, test, or entry point is identified in the report. Reproduce scans with JFrog CLI 2.36.0 and 2.36.1 on a multi-module Maven project, compare the JSON outputs, and trace the detection path responsible for the component names and package_type. Done means the output consistently represents the Maven modules or root project according to an agreed behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100