Skip to content

Instantly share code, notes, and snippets.

@srdo
Created February 20, 2019 15:32
Show Gist options
  • Save srdo/566a34df2dc4993529b2b21cacb8160d to your computer and use it in GitHub Desktop.
Save srdo/566a34df2dc4993529b2b21cacb8160d to your computer and use it in GitHub Desktop.
owasp plugin repositories error
$ mvn clean install
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Build Order:
[INFO]
[INFO] owasp-repositories-example [pom]
[INFO] child [jar]
[INFO]
[INFO] -------------< io.github.srdo:owasp-repositories-example >--------------
[INFO] Building owasp-repositories-example 1.0-SNAPSHOT [1/2]
[INFO] --------------------------------[ pom ]---------------------------------
[INFO]
[INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ owasp-repositories-example ---
[INFO] Deleting /mnt/c/Users/Legac/Documents/NetBeansProjects/owasp-repositories-example/target
[INFO]
[INFO] --- dependency-check-maven:5.0.0-M1:aggregate (default) @ owasp-repositories-example ---
[INFO] Central analyzer disabled
Downloading from central: https://repo.maven.apache.org/maven2/io/confluent/kafka-avro-serializer/1.0/kafka-avro-serializer-1.0.pom
[WARNING] The POM for io.confluent:kafka-avro-serializer:jar:1.0 is missing, no dependency information available
Downloading from central: https://repo.maven.apache.org/maven2/io/confluent/kafka-avro-serializer/1.0/kafka-avro-serializer-1.0.jar
Downloading from central: https://repo.maven.apache.org/maven2/io/confluent/kafka-schema-registry-client/1.0/kafka-schema-registry-client-1.0.pom
[WARNING] The POM for io.confluent:kafka-schema-registry-client:jar:1.0 is missing, no dependency information available
Downloading from central: https://repo.maven.apache.org/maven2/io/confluent/kafka-schema-registry-client/1.0/kafka-schema-registry-client-1.0.jar
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (19 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (2 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (3 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (4 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (8 seconds)
[WARNING]
One or more dependencies were identified with known vulnerabilities in owasp-repositories-example:
jackson-databind-2.4.3.jar (pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.3, cpe:2.3:a:fasterxml:jackson:2.4.3:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.4.3:*:*:*:*:*:*:*) : CVE-2017-15095, CVE-2017-17485, CVE-2017-7525, CVE-2018-1000873, CVE-2018-14718, CVE-2018-14719, CVE-2018-14720, CVE-2018-14721, CVE-2018-19360, CVE-2018-19361, CVE-2018-19362, CVE-2018-5968, CVE-2018-7489
See the dependency-check report for more details.
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for owasp-repositories-example 1.0-SNAPSHOT:
[INFO]
[INFO] owasp-repositories-example ......................... FAILURE [ 41.343 s]
[INFO] child .............................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 41.574 s
[INFO] Finished at: 2019-02-20T15:23:51Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:5.0.0-M1:aggregate (default) on project owasp-repositories-example: One or more exceptions occurred during dependency-check analysis: One or more exceptions occurred during analysis:
[ERROR] Could not find artifact io.confluent:kafka-avro-serializer:jar:1.0 in central (https://repo.maven.apache.org/maven2)
[ERROR] Could not find artifact io.confluent:kafka-schema-registry-client:jar:1.0 in central (https://repo.maven.apache.org/maven2)
[ERROR] Could not find artifact io.confluent:kafka-avro-serializer:jar:1.0 in central (https://repo.maven.apache.org/maven2)
[ERROR] Could not find artifact io.confluent:kafka-schema-registry-client:jar:1.0 in central (https://repo.maven.apache.org/maven2)
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment