jfrog / jfrog/jfrog-cli-security
jf audit fail for task ':generateDepTrees'
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Describe the bug
After 2.36.1 jf cli version, started issue with jf audit command. Its failing for ./gradlew clean generateDepTrees
Current behavior
` Errors occurred while build effective model from /home/gradle/.gradle/caches/modules-2/files-2.1/com.sun.xml.bind/jaxb-xjc/2.2.11/4da3d39ae8ccc39549e3f8971f56035f61d7bf79/jaxb-xjc-2.2.11.pom:
'dependencyManagement.dependencies.dependency.systemPath' for com.sun:tools:jar must specify an absolute path but is ${tools.jar} in com.sun.xml.bind:jaxb-xjc:2.2.11
FAILURE: Build failed with an exception.
- What went wrong:
Execution failed for task ':generateDepTrees'.`
Reproduction steps
No response
Expected behavior
No response
JFrog CLI version
2.36.1 to 2.37.3
Operating system type and version
debian
JFrog Artifactory version
No response
JFrog Xray version
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing ./gradlew clean generateDepTrees with JFrog CLI versions 2.36.1 through 2.37.3 on Debian, focusing on the reported jaxb-xjc-2.2.11 model error. Compare audit behavior across those versions and identify the regression; done means the dependency-tree task and audit command complete successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, java
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100