Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

OWASP gradle check failed

See original GitHub issue

Describe the bug We got a crash on CI.

Caused by: org.owasp.dependencycheck.exception.ExceptionCollection: One or more exceptions occurred during analysis:
	Failed to request component-reports: null
	at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:699)
	at org.owasp.dependencycheck.Engine$analyzeDependencies$3.call(Unknown Source)
	at org.owasp.dependencycheck.gradle.tasks.AbstractAnalyze.analyze(AbstractAnalyze.groovy:89)

** Version of dependency-check used ** The problem occurs using version 5.1.0 gradle plugin.

** Log file ** Full stacktrace is here.

Nothing special but here is also build log

To Reproduce No steps to reproduce. Looks like some race condition or gradle cache issues.

Expected behavior OWASP report doesn’t crash.

Additional context It is an android project that uses AGP 3.4.2 and Gralde 5.5.1. It is a multimodule project and we use gradle cache.

Issue Analytics

State:
Created 4 years ago
Reactions:2
Comments:24 (9 by maintainers)

Top GitHub Comments

2reactions

gabrielbieulescommented, Aug 1, 2019

Hi,

I have the same issue using 5.2.0. It does not occur using 5.0.0 but I cannot use it as it got that other issue #2073.

1reaction

jeremylongcommented, Aug 1, 2019

I have added additional logging to try and figure out what is going on - this will be included in the next release (point release hopefully this weekend).

Top Results From Across the Web

OWASP dependency check gradle plugin exception

gradle. The config I'm using in build.gradle is buildscript { repositories { mavenCentral() } dependencies { classpath 'org.owasp:dependency ...

dependency-check – Usage - GitHub Pages

The OWASP dependency-check-gradle plugin provides monitoring of the projects dependent libraries; creating a report of known vulnerable components that are ...

Error related to Dependency Check - Google Groups

We used to have OWASP dependency as a part of Jenkins build step apart from gradle build step. However, we segregated OWASP validation...

org.owasp.dependencycheck - Gradle Plugin Portal

dependencycheck. Owner: Jeremy Long. OWASP dependency-check-gradle plugin. http://jeremylong.github.io/DependencyCheck ...

How to check your Java dependencies for OWASP ...

The OWASP dependency-check provides monitoring of the libraries you use in ... by applying a closure in your build.gradle like the one below...