blackducksoftware / synopsys-detect

55%

master: 28%

LAST BUILD ON BRANCH task/romeara/update-beanutils

branch: task/romeara/update-beanutils

CHANGE BRANCH

x

Reset

• task/romeara/update-beanutils
• 5.3.2
• 5.3.3
• 5.4.0
• 5.5.0
• 5.5.1
• 5.6.0
• 5.6.0-RC5
• 5.6.0-RC6
• 5.6.1
• 5.6.2
• 5.6.3
• 6.0.0
• 6.1.0
• 6.1.0-RC4
• 6.1.1
• 6.2.0
• 6.2.1
• 6.3.0
• 6.4.0
• 6.4.1
• 6.4.2
• 6.5.0
• ac
• addDeprecatedPropertiesPage
• analytics-endpoint
• artifactory-properties
• battery
• bdio-2
• bdio-2-first-attempt
• bitbake-clean-version
• bitbake-layers
• bitbakeYocto3Compatibility
• build-fix-IDETECT-1797
• cargoDetectable
• cognitive-complexity
• condaDetectableTest
• configuration-property-resolver
• configuration-simplification
• copyrightSearchScannerProperty
• cpanDetectableTest
• cranDetectableTest
• custom-fields
• dependabot/npm_and_yarn/src/test/resources/battery/yarn-lock/handlebars-4.5.3
• dependabot/npm_and_yarn/src/test/resources/battery/yarn-lock/lodash-4.17.19
• detect-search-exclusion-paths
• detectConfigurationFactoryJava
• detectPropertiesJava
• detectable
• detectableOptionFactoryJava
• diagnostic-property
• doc-to-java
• doc/romeara/sort-options
• docker-win-stop
• docker-windows
• dockerBdba
• ek-add-plugin-dependencies
• ek-bd-42.2.0
• ek-change-code-location-wait
• ek-change-jar-signing
• ek-hack-start-time
• ek-regex-replace-revision
• ek-risk-report-fix
• ek-update-snippets
• escaping
• executable-finder
• fixDeferredDocumentTypeImplWarning
• fixWaitForResultsPropertyHelp
• git-exclusion
• git-parse
• git-project-info
• git-url
• gk_fix_dotnet
• gk_improve_dotnet_error_log
• gk_nuget_docs
• gk_support_dotnet_3
• gk_support_dotnet_3_no_regex
• go-gradle-auto
• goDetectableTest
• goListUError
• goModReplace
• goModReplaceImplementations
• gradleDetectableTest
• gradleInspectorProxyInfo
• groovy-warning-doc
• impact-analysis
• improveStatusDocs
• individualFileMatchProperty
• jake-bazel
• java-air-gap
• kk_detectDocs
• kotlin
• kotlin-docs
• lerna
• licenseStringSearchProperty
• logExecutableOutput
• logExecutableOutput2
• master
• maven-scopes
• mavenDetectableTest
• mkdocs
• npm-dev-fix
• npmDetectableTest
• nuget-inspector-1
• nuget-inspector-2
• nullableAnnotationUpdate
• packagistDetectableTest
• pearDetectableTest
• pipenv-json-tree
• poetryDetectable
• polaris-common-fix
• policy-check
• project-discovery
• properties
• properties-h
• property-metadata
• proxyInfoFix
• quality-gate
• rubyDetectableTest
• run-output-path
• saxParseException
• sb_addGivenGroupsToProject
• sb_addressingTodos
• sb_applyDocEdits
• sb_bazelCquery
• sb_bazelCqueryAdditionalOptions
• sb_bazelFixMixedTagsOn620
• sb_bazelHaskellCabalLibraryRule
• sb_bazelJvmMavenImportExternal
• sb_bazelMulipleRuleTypesOffMaster
• sb_bazelMultipleRuleTypes
• sb_bazelPipeline
• sb_blackduckCommon48
• sb_buildTest
• sb_changeDiWorkingDir
• sb_clangCollectUnrecognizedIncludeFiles
• sb_clangComplexNestedQuoting
• sb_clangIncludeEpochInExtId
• sb_cmake
• sb_codeLocationNameIndex
• sb_detectableHelpMetadata
• sb_diPullDi9xFromArtifactory
• sb_doNotFollowSymLinks
• sb_docFixes
• sb_docUpdates
• sb_dockerAirGapFix
• sb_dockerOnWindows
• sb_errorCodes
• sb_expandedHelp
• sb_expandedHelpMergeFromMaster
• sb_fixAggregateNaming
• sb_fixGradleInspectorUrl
• sb_fixMavenCliParsingErrorOnLongSubProjectName
• sb_fixPassingPropFileToDI
• sb_fixesFor5.4.0
• sb_goNpeFix
• sb_helpReOrg
• sb_helpReviewEdits
• sb_helpTextImprovements
• sb_helpUpdatesFor610Tickets
• sb_improvePolarisConnectionErrorReporting
• sb_jarSigning
• sb_merge610DocEdits
• sb_pipJavadoc
• sb_reworkGoDoc
• sb_scanDockerContainerFsWithHashes
• sb_sonarcloudIssues
• sb_tempTestTag
• sb_testContainer
• sb_yarnOOBExceptionTroubleshooting
• sonarCloudEdits
• sonarCloudLowRiskClassEdits
• sonarCloudVulnerabilities
• static-flag-no-exit
• statusJsonCodeLocations
• statusJsonIssuesList
• statusJsonIssuesListReportFix
• swiftDetectableTest
• testNewApi
• throw-on-upload-no-snippet
• unified-exclusion
• updateBatteryJava
• updateBlackDuckCommonVersion
• upgradeToSignatureScannerService
• upload-source
• upload-source-2
• upload-source-two
• userFriendlyOutput
• yarn-flat
• yarn-missing-dependency
• yarn-project-info
• yarnDetectableTest

Build # 1211

Build Type

push

travis-ci

Committed by romeara

Commit Message

Avoid transitive vulnerabilities by updating to commons-beanutils 1.9.4

There is a vulnerability in commons-beanutils:commons-beanutils:1.9.3
that is fixed in the subsequent micro release. This change updates all
instances of the vulnerable version, including in transitive
dependencies, to the fixed version

Run Details

258 of 468 relevant lines covered (55.13%)

0.55 hits per line