dependency-check / dependency-check-gradle

The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.
http://jeremylong.github.io/DependencyCheck/
Apache License 2.0
360 stars 93 forks source link

Build never finishes with AGP 8.3 #387

Open otbutz opened 7 months ago

otbutz commented 7 months ago

We updated our Android project to use the newer version of the Android Gradle Plugin(8.3.1) paired with a Gradle update from 8.2 to 8.4. This seems to break even the most current version of the dependency check plugin, resulting in a build that never completes.

allprojects {
    apply(plugin = "org.owasp.dependencycheck")

    configure<org.owasp.dependencycheck.gradle.extension.DependencyCheckExtension> {
        format = org.owasp.dependencycheck.reporting.ReportGenerator.Format.ALL.toString()
        nvd.apiKey = "xxxxxxxxxxxxxxxxxxxxxxxx"
        suppressionFile = "$rootDir/owasp-suppressions.xml"
        analyzers.apply {
            archiveEnabled = false
            assemblyEnabled = false
            knownExploitedEnabled = false
            nodeAudit.enabled = false
            nodePackage.enabled = false
            retirejs.enabled = false
        }
    }
}
./gradlew dependencyCheckAggregate
 > Task :dependencyCheckAggregate
 Verifying dependencies for project Android-Opti4Driver

 > Task :opticom:dependencyCheckAggregate
 Verifying dependencies for project opticom

 > Task :core:common:dependencyCheckAggregate
 Verifying dependencies for project common

 > Task :app:dependencyCheckAggregate
 Verifying dependencies for project app

 > Task :domain:dependencyCheckAggregate
 Verifying dependencies for project domain

 > Task :core:dependencyCheckAggregate
 Verifying dependencies for project core

 > Task :feature:dependencyCheckAggregate
 Verifying dependencies for project feature

 > Task :feature:after-order:dependencyCheckAggregate
 Verifying dependencies for project after-order
guilhermeborgesbastos commented 5 months ago

Any update on this issue? I am facing the same problem with Gradle 8.7.0