Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not collecting java packages for docker image couchbase:6.6.3 #4043

Closed
vivekgadhia14 opened this issue Apr 12, 2023 · 2 comments
Closed

Not collecting java packages for docker image couchbase:6.6.3 #4043

vivekgadhia14 opened this issue Apr 12, 2023 · 2 comments
Assignees
Labels
triage/support Indicates an issue that is a support question.

Comments

@vivekgadhia14
Copy link

vivekgadhia14 commented Apr 12, 2023

Description

Scanned couchbase:6.6.3 image using below command:
trivy image -f json --list-all-pkgs couchbase:6.6.3.

As I am running trivy using "--list-all-pkgs" so it should show all installed packages but in output json trivy is not reporting any java packages. There are many jar files present at location: /opt/couchbase/lib/cbas/repo in image and trivy is not reporting any of these packages. Scanned the same image with grype(0.61.0) and it is reporting log4j and some other java packages

What did you expect to happen?

Expected to report java based language packages regardless of whether those are vulnerable or not as "--list-all-pkgs" argument is passed.

What happened instead?

trivy missed to report java based packages.

Output of run with -debug:

2023-04-12T11:58:47.769Z        DEBUG   Severities: ["UNKNOWN" "LOW" "MEDIUM" "HIGH" "CRITICAL"]
2023-04-12T11:58:47.772Z        DEBUG   cache dir:  /root/.cache/trivy
2023-04-12T11:58:47.772Z        DEBUG   DB update was skipped because the local DB is the latest
2023-04-12T11:58:47.772Z        DEBUG   DB Schema: 2, UpdatedAt: 2023-04-12 06:08:58.279551471 +0000 UTC, NextUpdate: 2023-04-12 12:08:58.279550971 +0000 UTC, DownloadedAt: 2023-04-12 08:44:40.188953907 +0000 UTC
2023-04-12T11:58:47.772Z        INFO    Vulnerability scanning is enabled
2023-04-12T11:58:47.772Z        DEBUG   Vulnerability type:  [os library]
2023-04-12T11:58:47.773Z        INFO    Secret scanning is enabled
2023-04-12T11:58:47.773Z        INFO    If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-04-12T11:58:47.773Z        INFO    Please see also https://aquasecurity.github.io/trivy/v0.39/docs/secret/scanning/#recommendation for faster secret detection
2023-04-12T11:58:47.777Z        DEBUG   No secret config detected: trivy-secret.yaml
2023-04-12T11:58:47.777Z        DEBUG   Image ID: sha256:d3497b7413bd3c9f3d0760b17a5631fc473909b83a32ee873ee0fede1a998d0d
2023-04-12T11:58:47.777Z        DEBUG   Diff IDs: [sha256:9f54eef412758095c8079ac465d494a2872e02e90bf1fb5f12a1641c0d1bb78b sha256:966eb1b363f6bd63133c246bd50963275a410077d1e51f2f1cf3de902f051acb sha256:85d7907b24ffc7a1f7ec41f88de1927fc282d2917e3f3643cb8ac385a7a98b9d sha256:6ab176c2995d133a7a3caab4f2b3f206edc63b7d6cb30b3869695919213e5989 sha256:45147596db83dd12ddaf1de40b419d9d2eae543336278c4fd436d1f9d9715578 sha256:1db530ab201a59fdb5edfe6811c2944720082c3d1e676e7bece4a27df9d6244f sha256:9e749100f603ec67a78774645309302be1ed83e2b957fb1a386aa95568b3c74f sha256:05b3c27685bd175fc655bcaba3e41577e86005fab399cd0869b163fde70e7ef1 sha256:ba38fcf978e5a6b5c1e76632c0c18c46d69f0cbc6e4a5d667273a216c3680b01 sha256:1b41ec2a42a051b8a584426a92150a7a30e73d15a3132abdedf000308a7bf858 sha256:1298e6d2d8b3c922a472f69253d46357a0cdf3cf0276e3785f851987a0ac0c5c sha256:e7b9c3501ee9cba8e620a547e74c274ce8e280395439a50b0f09bb3c3680ec35]
2023-04-12T11:58:47.777Z        DEBUG   Base Layers: [sha256:9f54eef412758095c8079ac465d494a2872e02e90bf1fb5f12a1641c0d1bb78b]
2023-04-12T11:58:47.778Z        DEBUG   Missing image ID in cache: sha256:d3497b7413bd3c9f3d0760b17a5631fc473909b83a32ee873ee0fede1a998d0d
2023-04-12T11:58:47.778Z        DEBUG   Missing diff ID in cache: sha256:45147596db83dd12ddaf1de40b419d9d2eae543336278c4fd436d1f9d9715578
2023-04-12T11:58:47.778Z        DEBUG   Missing diff ID in cache: sha256:966eb1b363f6bd63133c246bd50963275a410077d1e51f2f1cf3de902f051acb
2023-04-12T11:58:47.779Z        DEBUG   Missing diff ID in cache: sha256:9f54eef412758095c8079ac465d494a2872e02e90bf1fb5f12a1641c0d1bb78b
2023-04-12T11:58:47.779Z        DEBUG   Missing diff ID in cache: sha256:85d7907b24ffc7a1f7ec41f88de1927fc282d2917e3f3643cb8ac385a7a98b9d
2023-04-12T11:58:47.779Z        DEBUG   Missing diff ID in cache: sha256:6ab176c2995d133a7a3caab4f2b3f206edc63b7d6cb30b3869695919213e5989
2023-04-12T11:59:18.968Z        DEBUG   Skipping directory: dev
2023-04-12T11:59:18.973Z        DEBUG   Skipping directory: proc
2023-04-12T11:59:18.974Z        DEBUG   Skipping directory: sys
2023-04-12T11:59:19.145Z        DEBUG   Missing diff ID in cache: sha256:1db530ab201a59fdb5edfe6811c2944720082c3d1e676e7bece4a27df9d6244f
2023-04-12T11:59:19.382Z        DEBUG   Missing diff ID in cache: sha256:9e749100f603ec67a78774645309302be1ed83e2b957fb1a386aa95568b3c74f
2023-04-12T11:59:19.486Z        DEBUG   Missing diff ID in cache: sha256:05b3c27685bd175fc655bcaba3e41577e86005fab399cd0869b163fde70e7ef1
2023-04-12T11:59:19.804Z        DEBUG   Missing diff ID in cache: sha256:ba38fcf978e5a6b5c1e76632c0c18c46d69f0cbc6e4a5d667273a216c3680b01
2023-04-12T11:59:20.020Z        DEBUG   Missing diff ID in cache: sha256:1b41ec2a42a051b8a584426a92150a7a30e73d15a3132abdedf000308a7bf858
2023-04-12T11:59:20.235Z        DEBUG   Missing diff ID in cache: sha256:1298e6d2d8b3c922a472f69253d46357a0cdf3cf0276e3785f851987a0ac0c5c
2023-04-12T11:59:20.391Z        DEBUG   Missing diff ID in cache: sha256:e7b9c3501ee9cba8e620a547e74c274ce8e280395439a50b0f09bb3c3680ec35
2023-04-12T12:04:05.065Z        INFO    JAR files found
2023-04-12T12:04:05.097Z        INFO    Analyzing JAR files takes a while...
2023-04-12T12:04:05.099Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/algebricks-rewriter.jar"}
2023-04-12T12:04:05.099Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/algebricks-runtime.jar"}
2023-04-12T12:04:05.107Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/annotations-2.10.83.jar"}
2023-04-12T12:04:05.107Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-active.jar"}
2023-04-12T12:04:05.108Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/apache-client-2.10.83.jar"}
2023-04-12T12:04:05.108Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/args4j-2.33.jar"}
2023-04-12T12:04:05.108Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-algebra.jar"}
2023-04-12T12:04:05.112Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-app.jar"}
2023-04-12T12:04:05.112Z        DEBUG   No such POM in the central repositories {"file": "algebricks-rewriter.jar"}
2023-04-12T12:04:05.113Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/algebricks-common.jar"}
2023-04-12T12:04:05.113Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/algebricks-compiler.jar"}
2023-04-12T12:04:05.113Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-common.jar"}
2023-04-12T12:04:05.114Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/algebricks-core.jar"}
2023-04-12T12:04:05.117Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/algebricks-data.jar"}
2023-04-12T12:04:05.117Z        DEBUG   No such POM in the central repositories {"file": "asterix-algebra.jar"}
2023-04-12T12:04:05.118Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-external-data.jar"}
2023-04-12T12:04:05.099Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/arns-2.10.83.jar"}
2023-04-12T12:04:05.120Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-lang-aql.jar"}
2023-04-12T12:04:05.121Z        DEBUG   No such POM in the central repositories {"file": "algebricks-compiler.jar"}
2023-04-12T12:04:05.121Z        DEBUG   No such POM in the central repositories {"file": "algebricks-runtime.jar"}
2023-04-12T12:04:05.121Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-lang-sqlpp.jar"}
2023-04-12T12:04:05.122Z        DEBUG   No such POM in the central repositories {"file": "algebricks-core.jar"}
2023-04-12T12:04:05.122Z        DEBUG   No such POM in the central repositories {"file": "algebricks-data.jar"}
2023-04-12T12:04:05.122Z        DEBUG   No such POM in the central repositories {"file": "asterix-app.jar"}
2023-04-12T12:04:05.122Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-aql.jar"}
2023-04-12T12:04:05.123Z        DEBUG   No such POM in the central repositories {"file": "algebricks-common.jar"}
2023-04-12T12:04:05.121Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-lang-common.jar"}
2023-04-12T12:04:05.123Z        DEBUG   No such POM in the central repositories {"file": "asterix-external-data.jar"}
2023-04-12T12:04:05.123Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-metadata.jar"}
2023-04-12T12:04:05.124Z        DEBUG   No such POM in the central repositories {"file": "asterix-active.jar"}
2023-04-12T12:04:05.124Z        DEBUG   No such POM in the central repositories {"file": "asterix-common.jar"}
2023-04-12T12:04:05.125Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-replication.jar"}
2023-04-12T12:04:05.125Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-sqlpp.jar"}
2023-04-12T12:04:05.125Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-runtime.jar"}
2023-04-12T12:04:05.126Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-om.jar"}
2023-04-12T12:04:05.129Z        DEBUG   No such POM in the central repositories {"file": "asterix-replication.jar"}
2023-04-12T12:04:05.130Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/bcpkix-jdk15on-1.68.jar"}
2023-04-12T12:04:05.130Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-common.jar"}
2023-04-12T12:04:05.130Z        DEBUG   No such POM in the central repositories {"file": "asterix-metadata.jar"}
2023-04-12T12:04:05.130Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/aws-xml-protocol-2.10.83.jar"}
2023-04-12T12:04:05.130Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/asterix-transactions.jar"}
2023-04-12T12:04:05.133Z        DEBUG   No such POM in the central repositories {"file": "asterix-om.jar"}
2023-04-12T12:04:05.130Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/auth-2.10.83.jar"}
2023-04-12T12:04:05.130Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/aws-core-2.10.83.jar"}
2023-04-12T12:04:05.133Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/aws-query-protocol-2.10.83.jar"}
2023-04-12T12:04:05.133Z        DEBUG   No such POM in the central repositories {"file": "asterix-runtime.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-compress-1.20.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/cbas-dcp-client.jar"}
2023-04-12T12:04:05.135Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-io-2.8.0.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/bcprov-jdk15on-1.68.jar"}
2023-04-12T12:04:05.135Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-lang3-3.12.0.jar"}
2023-04-12T12:04:05.135Z        DEBUG   No such POM in the central repositories {"file": "asterix-transactions.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/cbas-connector.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/cbas-common.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/cbas-server.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-codec-1.15.jar"}
2023-04-12T12:04:05.134Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-collections4-4.4.jar"}
2023-04-12T12:04:05.140Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-logging-1.2.jar"}
2023-04-12T12:04:05.141Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/algebricks-core.jar"}
2023-04-12T12:04:05.142Z        DEBUG   No such POM in the central repositories {"file": "cbas-connector.jar"}
2023-04-12T12:04:05.145Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/algebricks-data.jar"}
2023-04-12T12:04:05.146Z        DEBUG   No such POM in the central repositories {"file": "cbas-server.jar"}
2023-04-12T12:04:05.141Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/algebricks-common.jar"}
2023-04-12T12:04:05.146Z        DEBUG   No such POM in the central repositories {"file": "algebricks-core.jar"}
2023-04-12T12:04:05.141Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/algebricks-compiler.jar"}
2023-04-12T12:04:05.147Z        DEBUG   No such POM in the central repositories {"file": "algebricks-common.jar"}
2023-04-12T12:04:05.141Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/commons-text-1.9.jar"}
2023-04-12T12:04:05.142Z        DEBUG   No such POM in the central repositories {"file": "cbas-dcp-client.jar"}
2023-04-12T12:04:05.147Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/algebricks-rewriter.jar"}
2023-04-12T12:04:05.148Z        DEBUG   No such POM in the central repositories {"file": "algebricks-data.jar"}
2023-04-12T12:04:05.148Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-common.jar"}
2023-04-12T12:04:05.149Z        DEBUG   No such POM in the central repositories {"file": "algebricks-rewriter.jar"}
2023-04-12T12:04:05.149Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-external-data.jar"}
2023-04-12T12:04:05.152Z        DEBUG   No such POM in the central repositories {"file": "cbas-common.jar"}
2023-04-12T12:04:05.152Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/algebricks-runtime.jar"}
2023-04-12T12:04:05.152Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-algebra.jar"}
2023-04-12T12:04:05.152Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-active.jar"}
2023-04-12T12:04:05.154Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-app.jar"}
2023-04-12T12:04:05.154Z        DEBUG   No such POM in the central repositories {"file": "algebricks-compiler.jar"}
2023-04-12T12:04:05.158Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-lang-common.jar"}
2023-04-12T12:04:05.158Z        DEBUG   No such POM in the central repositories {"file": "asterix-app.jar"}
2023-04-12T12:04:05.161Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-lang-sqlpp.jar"}
2023-04-12T12:04:05.162Z        DEBUG   No such POM in the central repositories {"file": "asterix-external-data.jar"}
2023-04-12T12:04:05.162Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-metadata.jar"}
2023-04-12T12:04:05.162Z        DEBUG   No such POM in the central repositories {"file": "asterix-algebra.jar"}
2023-04-12T12:04:05.155Z        DEBUG   No such POM in the central repositories {"file": "asterix-common.jar"}
2023-04-12T12:04:05.154Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-lang-aql.jar"}
2023-04-12T12:04:05.160Z        DEBUG   No such POM in the central repositories {"file": "asterix-active.jar"}
2023-04-12T12:04:05.155Z        DEBUG   No such POM in the central repositories {"file": "algebricks-runtime.jar"}
2023-04-12T12:04:05.165Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-common.jar"}
2023-04-12T12:04:05.165Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-om.jar"}
2023-04-12T12:04:05.168Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-replication.jar"}
2023-04-12T12:04:05.170Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-runtime.jar"}
2023-04-12T12:04:05.174Z        DEBUG   No such POM in the central repositories {"file": "asterix-metadata.jar"}
2023-04-12T12:04:05.175Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-sqlpp.jar"}
2023-04-12T12:04:05.176Z        DEBUG   No such POM in the central repositories {"file": "asterix-om.jar"}
2023-04-12T12:04:05.177Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-api.jar"}
2023-04-12T12:04:05.176Z        DEBUG   No such POM in the central repositories {"file": "asterix-replication.jar"}
2023-04-12T12:04:05.176Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-aql.jar"}
2023-04-12T12:04:05.177Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/cbas-server.jar"}
2023-04-12T12:04:05.177Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/asterix-transactions.jar"}
2023-04-12T12:04:05.177Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/cbas-common.jar"}
2023-04-12T12:04:05.177Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/cbas-connector.jar"}
2023-04-12T12:04:05.177Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/cbas-dcp-client.jar"}
2023-04-12T12:04:05.182Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-client.jar"}
2023-04-12T12:04:05.183Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-comm.jar"}
2023-04-12T12:04:05.183Z        DEBUG   No such POM in the central repositories {"file": "cbas-dcp-client.jar"}
2023-04-12T12:04:05.185Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-control-common.jar"}
2023-04-12T12:04:05.184Z        DEBUG   No such POM in the central repositories {"file": "hyracks-client.jar"}
2023-04-12T12:04:05.184Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-control-cc.jar"}
2023-04-12T12:04:05.186Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-control-nc.jar"}
2023-04-12T12:04:05.187Z        DEBUG   No such POM in the central repositories {"file": "cbas-connector.jar"}
2023-04-12T12:04:05.187Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-data-std.jar"}
2023-04-12T12:04:05.185Z        DEBUG   No such POM in the central repositories {"file": "hyracks-api.jar"}
2023-04-12T12:04:05.185Z        DEBUG   No such POM in the central repositories {"file": "cbas-server.jar"}
2023-04-12T12:04:05.185Z        DEBUG   No such POM in the central repositories {"file": "asterix-transactions.jar"}
2023-04-12T12:04:05.184Z        DEBUG   No such POM in the central repositories {"file": "asterix-runtime.jar"}
2023-04-12T12:04:05.187Z        DEBUG   No such POM in the central repositories {"file": "cbas-common.jar"}
2023-04-12T12:04:05.187Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-common.jar"}
2023-04-12T12:04:05.188Z        DEBUG   No such POM in the central repositories {"file": "hyracks-comm.jar"}
2023-04-12T12:04:05.189Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-dataflow-common.jar"}
2023-04-12T12:04:05.189Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-nc.jar"}
2023-04-12T12:04:05.190Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-dataflow-std.jar"}
2023-04-12T12:04:05.190Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-cc.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-lsm-btree.jar"}
2023-04-12T12:04:05.191Z        DEBUG   No such POM in the central repositories {"file": "hyracks-data-std.jar"}
2023-04-12T12:04:05.192Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-lsm-common.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-common.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-http.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-ipc.jar"}
2023-04-12T12:04:05.195Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-btree.jar"}
2023-04-12T12:04:05.195Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-lsm-invertedindex.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-net.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-bloomfilter.jar"}
2023-04-12T12:04:05.191Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-btree.jar"}
2023-04-12T12:04:05.192Z        DEBUG   No such POM in the central repositories {"file": "hyracks-dataflow-common.jar"}
2023-04-12T12:04:05.194Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-common.jar"}
2023-04-12T12:04:05.194Z        DEBUG   No such POM in the central repositories {"file": "hyracks-dataflow-std.jar"}
2023-04-12T12:04:05.197Z        DEBUG   No such POM in the central repositories {"file": "hyracks-http.jar"}
2023-04-12T12:04:05.197Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-common.jar"}
2023-04-12T12:04:05.198Z        DEBUG   No such POM in the central repositories {"file": "hyracks-ipc.jar"}
2023-04-12T12:04:05.198Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-invertedindex.jar"}
2023-04-12T12:04:05.199Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-lsm-rtree.jar"}
2023-04-12T12:04:05.200Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-bloomfilter.jar"}
2023-04-12T12:04:05.199Z        DEBUG   No such POM in the central repositories {"file": "hyracks-net.jar"}
2023-04-12T12:04:05.200Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-am-rtree.jar"}
2023-04-12T12:04:05.200Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-btree.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-storage-common.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/algebricks-runtime.jar"}
2023-04-12T12:04:05.202Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-rtree.jar"}
2023-04-12T12:04:05.202Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-active.jar"}
2023-04-12T12:04:05.201Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-rtree.jar"}
2023-04-12T12:04:05.203Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-common.jar"}
2023-04-12T12:04:05.203Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-algebra.jar"}
2023-04-12T12:04:05.203Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-app.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/algebricks-common.jar"}
2023-04-12T12:04:05.206Z        DEBUG   No such POM in the central repositories {"file": "asterix-active.jar"}
2023-04-12T12:04:05.206Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-common.jar"}
2023-04-12T12:04:05.207Z        DEBUG   No such POM in the central repositories {"file": "algebricks-runtime.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/algebricks-compiler.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/algebricks-core.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/algebricks-data.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/algebricks-rewriter.jar"}
2023-04-12T12:04:05.201Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/60x/hyracks-util.jar"}
2023-04-12T12:04:05.208Z        DEBUG   No such POM in the central repositories {"file": "asterix-algebra.jar"}
2023-04-12T12:04:05.208Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-external-data.jar"}
2023-04-12T12:04:05.208Z        DEBUG   No such POM in the central repositories {"file": "algebricks-common.jar"}
2023-04-12T12:04:05.208Z        DEBUG   No such POM in the central repositories {"file": "asterix-common.jar"}
2023-04-12T12:04:05.210Z        DEBUG   No such POM in the central repositories {"file": "algebricks-compiler.jar"}
2023-04-12T12:04:05.211Z        DEBUG   No such POM in the central repositories {"file": "asterix-app.jar"}
2023-04-12T12:04:05.212Z        DEBUG   No such POM in the central repositories {"file": "algebricks-data.jar"}
2023-04-12T12:04:05.212Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-lang-aql.jar"}
2023-04-12T12:04:05.213Z        DEBUG   No such POM in the central repositories {"file": "algebricks-rewriter.jar"}
2023-04-12T12:04:05.215Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-runtime.jar"}
2023-04-12T12:04:05.213Z        DEBUG   No such POM in the central repositories {"file": "algebricks-core.jar"}
2023-04-12T12:04:05.213Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-lang-common.jar"}
2023-04-12T12:04:05.215Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-lang-sqlpp.jar"}
2023-04-12T12:04:05.215Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-metadata.jar"}
2023-04-12T12:04:05.215Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-om.jar"}
2023-04-12T12:04:05.215Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-replication.jar"}
2023-04-12T12:04:05.215Z        DEBUG   No such POM in the central repositories {"file": "hyracks-util.jar"}
2023-04-12T12:04:05.223Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/asterix-transactions.jar"}
2023-04-12T12:04:05.216Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-aql.jar"}
2023-04-12T12:04:05.224Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-sqlpp.jar"}
2023-04-12T12:04:05.224Z        DEBUG   No such POM in the central repositories {"file": "asterix-external-data.jar"}
2023-04-12T12:04:05.225Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/cbas-common.jar"}
2023-04-12T12:04:05.223Z        DEBUG   No such POM in the central repositories {"file": "asterix-om.jar"}
2023-04-12T12:04:05.226Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/cbas-connector.jar"}
2023-04-12T12:04:05.226Z        DEBUG   No such POM in the central repositories {"file": "asterix-metadata.jar"}
2023-04-12T12:04:05.226Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/cbas-dcp-client.jar"}
2023-04-12T12:04:05.227Z        DEBUG   No such POM in the central repositories {"file": "asterix-replication.jar"}
2023-04-12T12:04:05.228Z        DEBUG   No such POM in the central repositories {"file": "asterix-runtime.jar"}
2023-04-12T12:04:05.228Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-api.jar"}
2023-04-12T12:04:05.230Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/cbas-server.jar"}
2023-04-12T12:04:05.231Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-control-cc.jar"}
2023-04-12T12:04:05.232Z        DEBUG   No such POM in the central repositories {"file": "cbas-dcp-client.jar"}
2023-04-12T12:04:05.232Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-control-common.jar"}
2023-04-12T12:04:05.232Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-client.jar"}
2023-04-12T12:04:05.228Z        DEBUG   No such POM in the central repositories {"file": "asterix-transactions.jar"}
2023-04-12T12:04:05.228Z        DEBUG   No such POM in the central repositories {"file": "asterix-lang-common.jar"}
2023-04-12T12:04:05.232Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-comm.jar"}
2023-04-12T12:04:05.234Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-control-nc.jar"}
2023-04-12T12:04:05.228Z        DEBUG   No such POM in the central repositories {"file": "cbas-common.jar"}
2023-04-12T12:04:05.232Z        DEBUG   No such POM in the central repositories {"file": "cbas-server.jar"}
2023-04-12T12:04:05.232Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-cc.jar"}
2023-04-12T12:04:05.233Z        DEBUG   No such POM in the central repositories {"file": "hyracks-api.jar"}
2023-04-12T12:04:05.233Z        DEBUG   No such POM in the central repositories {"file": "cbas-connector.jar"}
2023-04-12T12:04:05.235Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-common.jar"}
2023-04-12T12:04:05.236Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-bloomfilter.jar"}
2023-04-12T12:04:05.236Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-dataflow-std.jar"}
2023-04-12T12:04:05.236Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-http.jar"}
2023-04-12T12:04:05.236Z        DEBUG   No such POM in the central repositories {"file": "hyracks-client.jar"}
2023-04-12T12:04:05.236Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-btree.jar"}
2023-04-12T12:04:05.237Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-ipc.jar"}
2023-04-12T12:04:05.239Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-net.jar"}
2023-04-12T12:04:05.240Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-bloomfilter.jar"}
2023-04-12T12:04:05.240Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-common.jar"}
2023-04-12T12:04:05.240Z        DEBUG   No such POM in the central repositories {"file": "hyracks-ipc.jar"}
2023-04-12T12:04:05.241Z        DEBUG   No such POM in the central repositories {"file": "hyracks-comm.jar"}
2023-04-12T12:04:05.240Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-btree.jar"}
2023-04-12T12:04:05.240Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-data-std.jar"}
2023-04-12T12:04:05.241Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-lsm-btree.jar"}
2023-04-12T12:04:05.240Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-dataflow-common.jar"}
2023-04-12T12:04:05.243Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-lsm-common.jar"}
2023-04-12T12:04:05.240Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-nc.jar"}
2023-04-12T12:04:05.244Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-btree.jar"}
2023-04-12T12:04:05.244Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-rtree.jar"}
2023-04-12T12:04:05.245Z        DEBUG   No such POM in the central repositories {"file": "hyracks-http.jar"}
2023-04-12T12:04:05.245Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-common.jar"}
2023-04-12T12:04:05.245Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-lsm-invertedindex.jar"}
2023-04-12T12:04:05.246Z        DEBUG   No such POM in the central repositories {"file": "hyracks-net.jar"}
2023-04-12T12:04:05.246Z        DEBUG   No such POM in the central repositories {"file": "hyracks-dataflow-std.jar"}
2023-04-12T12:04:05.246Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-util.jar"}
2023-04-12T12:04:05.246Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/core-io-1.7.20.jar"}
2023-04-12T12:04:05.248Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/compat/65x/hyracks-storage-am-lsm-rtree.jar"}
2023-04-12T12:04:05.249Z        DEBUG   No such POM in the central repositories {"file": "hyracks-util.jar"}
2023-04-12T12:04:05.249Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-common.jar"}
2023-04-12T12:04:05.250Z        DEBUG   No such POM in the central repositories {"file": "hyracks-data-std.jar"}
2023-04-12T12:04:05.250Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-common.jar"}
2023-04-12T12:04:05.251Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-rtree.jar"}
2023-04-12T12:04:05.251Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-common.jar"}
2023-04-12T12:04:05.251Z        DEBUG   No such POM in the central repositories {"file": "hyracks-dataflow-common.jar"}
2023-04-12T12:04:05.251Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/guava-30.1-jre.jar"}
2023-04-12T12:04:05.253Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/http-client-spi-2.10.83.jar"}
2023-04-12T12:04:05.253Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/httpclient-4.5.13.jar"}
2023-04-12T12:04:05.253Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/httpcore-4.4.14.jar"}
2023-04-12T12:04:05.254Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-api.jar"}
2023-04-12T12:04:05.252Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-invertedindex.jar"}
2023-04-12T12:04:05.252Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/disruptor-1.2.15-jdk8.jar"}
2023-04-12T12:04:05.255Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-client.jar"}
2023-04-12T12:04:05.256Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-comm.jar"}
2023-04-12T12:04:05.252Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/error_prone_annotations-2.3.4.jar"}
2023-04-12T12:04:05.257Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-control-cc.jar"}
2023-04-12T12:04:05.258Z        DEBUG   No such POM in the central repositories {"file": "hyracks-comm.jar"}
2023-04-12T12:04:05.258Z        DEBUG   No such POM in the central repositories {"file": "hyracks-api.jar"}
2023-04-12T12:04:05.252Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/eventstream-1.0.1.jar"}
2023-04-12T12:04:05.252Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/failureaccess-1.0.1.jar"}
2023-04-12T12:04:05.252Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/esri-geometry-api-2.0.0.jar"}
2023-04-12T12:04:05.252Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/fastutil-8.3.0.jar"}
2023-04-12T12:04:05.252Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-rtree.jar"}
2023-04-12T12:04:05.259Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-control-common.jar"}
2023-04-12T12:04:05.261Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-control-nc.jar"}
2023-04-12T12:04:05.261Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-cc.jar"}
2023-04-12T12:04:05.262Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-ipc.jar"}
2023-04-12T12:04:05.262Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-data-std.jar"}
2023-04-12T12:04:05.264Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-dataflow-common.jar"}
2023-04-12T12:04:05.265Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-dataflow-std.jar"}
2023-04-12T12:04:05.267Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-common.jar"}
2023-04-12T12:04:05.267Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-net.jar"}
2023-04-12T12:04:05.265Z        DEBUG   No such POM in the central repositories {"file": "hyracks-data-std.jar"}
2023-04-12T12:04:05.265Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-http.jar"}
2023-04-12T12:04:05.259Z        DEBUG   No such POM in the central repositories {"file": "hyracks-client.jar"}
2023-04-12T12:04:05.272Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-bloomfilter.jar"}
2023-04-12T12:04:05.273Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-btree.jar"}
2023-04-12T12:04:05.276Z        DEBUG   No such POM in the central repositories {"file": "hyracks-net.jar"}
2023-04-12T12:04:05.276Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-common.jar"}
2023-04-12T12:04:05.277Z        DEBUG   No such POM in the central repositories {"file": "hyracks-control-nc.jar"}
2023-04-12T12:04:05.277Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-lsm-btree.jar"}
2023-04-12T12:04:05.277Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-common.jar"}
2023-04-12T12:04:05.280Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-lsm-invertedindex.jar"}
2023-04-12T12:04:05.277Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-bloomfilter.jar"}
2023-04-12T12:04:05.278Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-lsm-common.jar"}
2023-04-12T12:04:05.283Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-lsm-rtree.jar"}
2023-04-12T12:04:05.286Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-btree.jar"}
2023-04-12T12:04:05.286Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-am-rtree.jar"}
2023-04-12T12:04:05.288Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-rtree.jar"}
2023-04-12T12:04:05.288Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-storage-common.jar"}
2023-04-12T12:04:05.288Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-rtree.jar"}
2023-04-12T12:04:05.289Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/hyracks-util.jar"}
2023-04-12T12:04:05.289Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-btree.jar"}
2023-04-12T12:04:05.290Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/ini4j-0.5.4.jar"}
2023-04-12T12:04:05.291Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-common.jar"}
2023-04-12T12:04:05.292Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/jackson-annotations-2.12.3.jar"}
2023-04-12T12:04:05.292Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/jackson-databind-2.12.3.jar"}
2023-04-12T12:04:05.293Z        DEBUG   No such POM in the central repositories {"file": "hyracks-ipc.jar"}
2023-04-12T12:04:05.293Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/log4j-api-2.14.1.jar"}
2023-04-12T12:04:05.293Z        DEBUG   No such POM in the central repositories {"file": "hyracks-dataflow-std.jar"}
2023-04-12T12:04:05.293Z        DEBUG   No such POM in the central repositories {"file": "hyracks-dataflow-common.jar"}
2023-04-12T12:04:05.294Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-am-lsm-invertedindex.jar"}
2023-04-12T12:04:05.294Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/log4j-core-2.14.1.jar"}
2023-04-12T12:04:05.295Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/log4j-jcl-2.14.1.jar"}
2023-04-12T12:04:05.295Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/log4j-jul-2.14.1.jar"}
2023-04-12T12:04:05.295Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/log4j-slf4j-impl-2.14.1.jar"}
2023-04-12T12:04:05.295Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/log4j-web-2.14.1.jar"}
2023-04-12T12:04:05.296Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/netty-reactive-streams-http-2.0.4.jar"}
2023-04-12T12:04:05.296Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/netty-tcnative-boringssl-static-2.0.39.Final.jar"}
2023-04-12T12:04:05.296Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/netty-all-4.1.63.Final.jar"}
2023-04-12T12:04:05.297Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/opentracing-api-0.31.0.jar"}
2023-04-12T12:04:05.297Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/jackson-core-2.12.3.jar"}
2023-04-12T12:04:05.297Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/protocol-core-2.10.83.jar"}
2023-04-12T12:04:05.298Z        DEBUG   No such POM in the central repositories {"file": "hyracks-storage-common.jar"}
2023-04-12T12:04:05.297Z        DEBUG   No such POM in the central repositories {"file": "hyracks-util.jar"}
2023-04-12T12:04:05.298Z        DEBUG   No such POM in the central repositories {"file": "hyracks-http.jar"}
2023-04-12T12:04:05.297Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/profiles-2.10.83.jar"}
2023-04-12T12:04:05.298Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/reactive-streams-1.0.2.jar"}
2023-04-12T12:04:05.299Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/regions-2.10.83.jar"}
2023-04-12T12:04:05.300Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/slf4j-api-1.7.25.jar"}
2023-04-12T12:04:05.301Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/snappy-java-1.1.7.1.jar"}
2023-04-12T12:04:05.296Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/netty-nio-client-2.10.83.jar"}
2023-04-12T12:04:05.301Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/tpcds-1.2.jar"}
2023-04-12T12:04:05.302Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/runtime/lib/jrt-fs.jar"}
2023-04-12T12:04:05.303Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/rxjava-1.3.8.jar"}
2023-04-12T12:04:05.305Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/s3-2.10.83.jar"}
2023-04-12T12:04:05.306Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/sdk-core-2.10.83.jar"}
2023-04-12T12:04:05.302Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/utils-2.10.83.jar"}
2023-04-12T12:04:05.297Z        DEBUG   Parsing Java artifacts...       {"file": "opt/couchbase/lib/cbas/repo/netty-reactive-streams-2.0.4.jar"}
2023-04-12T12:04:05.320Z        DEBUG   No such POM in the central repositories {"file": "jrt-fs.jar"}
2023-04-12T12:04:05.374Z        DEBUG   No secrets found in container image config
2023-04-12T12:04:05.382Z        INFO    Detected OS: ubuntu
2023-04-12T12:04:05.382Z        INFO    Detecting Ubuntu vulnerabilities...
2023-04-12T12:04:05.383Z        DEBUG   ubuntu: os version: 20.04
2023-04-12T12:04:05.383Z        DEBUG   ubuntu: the number of packages: 120
2023-04-12T12:04:05.418Z        INFO    Number of language-specific files: 1
2023-04-12T12:04:05.418Z        INFO    Detecting python-pkg vulnerabilities...
2023-04-12T12:04:05.418Z        DEBUG   Detecting library vulnerabilities, type: python-pkg, path:

Output of trivy -v:

Version: 0.39.0
Vulnerability DB:
  Version: 2
  UpdatedAt: 2023-04-12 06:08:58.279551471 +0000 UTC
  NextUpdate: 2023-04-12 12:08:58.279550971 +0000 UTC
  DownloadedAt: 2023-04-12 08:44:40.188953907 +0000 UTC
Java DB:
  Version: 1
  UpdatedAt: 2023-04-12 00:51:07.355031613 +0000 UTC
  NextUpdate: 2023-04-15 00:51:07.355031213 +0000 UTC
  DownloadedAt: 2023-04-12 08:45:16.91771119 +0000 UTC

Additional details (base image name, container registry info...): base image: ubuntu 20.04

@vivekgadhia14 vivekgadhia14 added the kind/bug Categorizes issue or PR as related to a bug. label Apr 12, 2023
@DmitriyLewen DmitriyLewen self-assigned this Apr 18, 2023
@DmitriyLewen
Copy link
Contributor

DmitriyLewen commented Apr 18, 2023

Hello @vivekgadhia14
Thanks for your report!

If i understand correctly - these jar files are installed from dpkg.

root@6b61fb0b92d7:/# dpkg -S /opt/couchbase/lib/cbas/repo/log4j-core-2.14.1.jar
couchbase-server: /opt/couchbase/lib/cbas/repo/log4j-core-2.14.1.jar

To exclude duplicates and avoid false positives for packages fixed by OS vendor - we mark these files as system and exclude them.

In your case couchbase-server includes there jars.

If you still want to scan these jar separately of dpkg - you can skip /var/lib/dpkg/info/couchbase-server.list couchbase:6.6.3

I close this issue. Feel free to reopen this issue, if you still have questions.

Regards, Dmitiry

@DmitriyLewen DmitriyLewen added triage/support Indicates an issue that is a support question. and removed kind/bug Categorizes issue or PR as related to a bug. labels Apr 18, 2023
@knqyf263
Copy link
Collaborator

Note that couchbase-server should be shown in a list of OS packages. We should follow security advisories from Ubuntu, not upstream, as the JAR files may have patches applied even though the version looks old. Many scanners likely show false positives in this case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triage/support Indicates an issue that is a support question.
Projects
None yet
Development

No branches or pull requests

3 participants