Skip to content

Commit 2afdf45

Browse files
Add new dependencies
1 parent b819a24 commit 2afdf45

File tree

2 files changed

+1
-3
lines changed

2 files changed

+1
-3
lines changed

.github/workflows/backend.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -132,7 +132,6 @@ jobs:
132132

133133
- name: Run Trivy vulnerability scanner on Java dependencies
134134
uses: aquasecurity/trivy-action@master
135-
continue-on-error: true
136135
with:
137136
scan-type: 'fs'
138137
scan-ref: './backend'
@@ -174,7 +173,6 @@ jobs:
174173

175174
- name: Run Trivy vulnerability scanner for the entire image artifact
176175
uses: aquasecurity/trivy-action@master
177-
continue-on-error: true
178176
with:
179177
image-ref: localbuild/backend:${{ env.TAG }}
180178
severity: 'HIGH,CRITICAL'

backend/pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
<dependency>
3434
<groupId>org.apache.logging.log4j</groupId>
3535
<artifactId>log4j-core</artifactId>
36-
<version>2.14.0</version> <!-- vulnerable: CVE-2021-44228 (Log4Shell) -->
36+
<version>2.14.0</version>
3737
</dependency>
3838

3939

0 commit comments

Comments
 (0)