From 50827311133dff93e9267998ed1e19fc5108ab29 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Brunner?= Date: Fri, 6 Sep 2024 09:11:53 +0200 Subject: [PATCH] Ignore [LOW] com.google.guava:guava@31.0.1-jre: SNYK-JAVA-COMGOOGLEGUAVA-5710356 CWE-379 [Fixed in: 32.0.0-android, 32.0.0-jre]. --- .github/workflows/main.yaml | 2 +- .snyk | 4 ++++ core/build.gradle | 1 - 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index c83061be84..996b6e8af9 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -124,7 +124,7 @@ jobs: mkdir -p /tmp/test_results/junit find . -name '*TEST-*.xml' -exec cp -v {} /tmp/test_results/junit/ \; if: failure() - - uses: actions/upload-artifact@v1 + - uses: actions/upload-artifact@v3 with: name: Test results path: /tmp/test_results diff --git a/.snyk b/.snyk index 731c60e100..452d5b040a 100644 --- a/.snyk +++ b/.snyk @@ -22,4 +22,8 @@ ignore: - '*': reason: Used in check style created: 2022-10-18T05:49:44.892Z + SNYK-JAVA-COMGOOGLEGUAVA-5710356: + - '*': + reason: Indirect dependance to CheckStyle and low severity + created: 2024-09-06T07:05:16.154Z patch: {} diff --git a/core/build.gradle b/core/build.gradle index 1b4e926c68..559e801cf2 100644 --- a/core/build.gradle +++ b/core/build.gradle @@ -175,7 +175,6 @@ dependencies { ) compile fileTree(dir: "$projectDir/libs", include: '*.jar') compile( - 'com.google.guava:guava:32.0.1-jre', "org.slf4j:slf4j-api:${slf4jVersion}", "org.slf4j:jcl-over-slf4j:${slf4jVersion}", "org.slf4j:jul-to-slf4j:${slf4jVersion}",