Tweaked project dependencies for Maven plugin to avoid CVSS SNYK-JAVA… #329
Conversation
…-ORGAPACHEMAVENSHARED-570592
|
Whoa, hey, the Sonar fail isn't my fault; nothing I changed had any impact on the Sonar scan. might be that it's trying to reach across to my forked repo and can't access because it doesn't have credentials for it. If that's the case, I'm very willing to add the service account you're using to run Sonar, to the forked repo's config. Alternately, I really like this plugin; I'm willing to be a contributor to more than just config changes. If you're interested in / willing to have additional contributors, I'd love to join the project. My company for many years didn't allow OSS contributions, but they recently changed the policy. I have 20 years of Java experience to offer... :-) |
There was a problem hiding this comment.
@jtwing62173 thanks for the contribution!
I will release this change as part of 3.1.1 soon.
|
@jtwing62173, version 3.1.1 with your fix was released today. Thanks! |
2 participants
Fix for the Severe vulnerability in the Maven plugin shared library, per Issue reported.
#326
This contains a fix that builds and passes tests. When's the next release? :-)