search

jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
https://owasp.org/www-project-dependency-check/
Apache License 2.0
6.32k stars 1.26k forks source link

[9.0.3] Unable to generate json report Unexpected character ('}' (code 125)): was expecting double-quote to start field name at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, #6250

Closed readonlyuser1 closed 9 months ago

readonlyuser1 commented 9 months ago

Describe the bug

dependency-check     
-s /builds/xxx/sss/pppppp    
-o /builds/xxx/sss/pppppp    
--suppression owaspdc-suppression-file.xml 
-f ALL     
--noupdate          
--nodeAuditSkipDevDependencies     
--nodePackageSkipDevDependencies     
--disableYarnAudit     
--disableRetireJS     
--disableMSBuild     
--ossIndexUsername [MASKED]     
--ossIndexPassword [MASKED]     
--prettyPrint     
--log owdc-1.log

Error generating the report for org.owasp.dependencycheck.exception.ReportException: Unable to generate json report Unexpected character ('}' (code 125)): was expecting double-quote to start field name at [Source: REDACTED (StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION disabled); line: 1,

Version of dependency-check used Dependency-Check Core version 9.0.3 User-agent: dependency-check/9.0.3 (Linux; 6.2.0-37-generic; amd64; 11.0.21)

Log file

INFO  - Finished Unused Suppression Rule Analyzer (0 seconds)
2023-12-07 07:19:58,287 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Archive Analyzer'
2023-12-07 07:19:58,288 org.owasp.dependencycheck.analyzer.ArchiveAnalyzer:228
DEBUG - Attempting to delete temporary files from `/tmp/dctemp14288f55-e20b-4195-b681-20aa4cbb80a4/check12352810431522833011tmp`
2023-12-07 07:20:00,636 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Ruby Bundle Audit Analyzer'
2023-12-07 07:20:00,636 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'File Name Analyzer'
2023-12-07 07:20:00,636 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Jar Analyzer'
2023-12-07 07:20:00,636 org.owasp.dependencycheck.analyzer.JarAnalyzer:1136
DEBUG - Attempting to delete temporary files from `/tmp/dctemp14288f55-e20b-4195-b681-20aa4cbb80a4/check3336886485056188995tmp`
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Central Analyzer'
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Nexus Analyzer'
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Artifactory Analyzer'
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Nuspec Analyzer'
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Nugetconf Analyzer'
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'MSBuild Project Analyzer'
2023-12-07 07:20:00,815 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Assembly Analyzer'
2023-12-07 07:20:00,817 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'OpenSSL Source Analyzer'
2023-12-07 07:20:00,817 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Node.js Package Analyzer'
2023-12-07 07:20:00,817 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Libman Analyzer'
2023-12-07 07:20:00,817 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Dependency Merging Analyzer'
2023-12-07 07:20:00,817 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Hint Analyzer'
2023-12-07 07:20:00,818 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Version Filter Analyzer'
2023-12-07 07:20:00,818 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'CPE Analyzer'
2023-12-07 07:20:00,823 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'False Positive Analyzer'
2023-12-07 07:20:00,823 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'NVD CVE Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Node Audit Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Yarn Audit Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Pnpm Audit Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'RetireJS Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Sonatype OSS Index Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Vulnerability Suppression Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Known Exploited Vulnerability Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Dependency Bundling Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:860
DEBUG - Closing Analyzer 'Unused Suppression Rule Analyzer'
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:689
DEBUG - 
----------------------------------------------------
END ANALYSIS
----------------------------------------------------
2023-12-07 07:20:00,824 org.owasp.dependencycheck.Engine:691
INFO  - Analysis Complete (111 seconds)
2023-12-07 07:20:00,859 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:20:00,859 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:20:00,865 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:20:00,872 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:20:00,873 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:20:00,874 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:20:00,877 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:20:00,878 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:20:00,879 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:20:00,880 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:20:00,881 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:20:00,883 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:20:00,884 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:20:00,885 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:20:00,919 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:20:00,944 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:20:00,947 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:20:00,947 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:20:00,947 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:20:00,947 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:20:00,947 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:20:00,947 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:20:00,958 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing XML report to: /builds/xxxx/ssss/ppppppp/dependency-check-report.xml
2023-12-07 07:20:01,054 org.apache.velocity.runtime.VelocimacroFactory:385
DEBUG - added VM writeXmlException: source=org.apache.velocity.Template@67fc2aad
2023-12-07 07:20:02,844 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing HTML report to: /builds/xxxx/ssss/ppppppp/dependency-check-report.html
2023-12-07 07:20:02,926 org.apache.velocity.runtime.VelocimacroFactory:385
DEBUG - added VM writeHtmlException: source=org.apache.velocity.Template@7724704f
2023-12-07 07:20:03,295 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing JSON report to: /builds/xxxx/ssss/ppppppp/dependency-check-report.json
2023-12-07 07:20:03,321 org.apache.velocity.runtime.VelocimacroFactory:385
DEBUG - added VM writeJsonException: source=org.apache.velocity.Template@20f6f88c
2023-12-07 07:20:03,621 org.owasp.dependencycheck.reporting.ReportGenerator:560
DEBUG - pretify json: /builds/xxxx/ssss/ppppppp/dependency-check-report.json
2023-12-07 07:20:03,686 org.owasp.dependencycheck.reporting.ReportGenerator:579
DEBUG - Malformed JSON?
com.fasterxml.jackson.core.JsonParseException: Unexpected character ('}' (code 125)): was expecting double-quote to start field name
 at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 172192]
    at com.fasterxml.jackson.core.JsonParser._constructError(JsonParser.java:2481)
    at com.fasterxml.jackson.core.base.ParserMinimalBase._reportError(ParserMinimalBase.java:752)
    at com.fasterxml.jackson.core.base.ParserMinimalBase._reportUnexpectedChar(ParserMinimalBase.java:676)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._handleOddName(UTF8StreamJsonParser.java:2147)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._parseName(UTF8StreamJsonParser.java:1797)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser.nextToken(UTF8StreamJsonParser.java:801)
    at org.owasp.dependencycheck.reporting.ReportGenerator.pretifyJson(ReportGenerator.java:574)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:363)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:353)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:327)
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1264)
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1213)
    at org.owasp.dependencycheck.App.runScan(App.java:272)
    at org.owasp.dependencycheck.App.run(App.java:194)
    at org.owasp.dependencycheck.App.main(App.java:89)
2023-12-07 07:20:03,687 org.owasp.dependencycheck.Engine:1267
DEBUG - Error generating the report for 
org.owasp.dependencycheck.exception.ReportException: Unable to generate json report
    at org.owasp.dependencycheck.reporting.ReportGenerator.pretifyJson(ReportGenerator.java:580)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:363)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:353)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:327)
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1264)
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1213)
    at org.owasp.dependencycheck.App.runScan(App.java:272)
    at org.owasp.dependencycheck.App.run(App.java:194)
    at org.owasp.dependencycheck.App.main(App.java:89)
Caused by: com.fasterxml.jackson.core.JsonParseException: Unexpected character ('}' (code 125)): was expecting double-quote to start field name
 at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 172192]
    at com.fasterxml.jackson.core.JsonParser._constructError(JsonParser.java:2481)
    at com.fasterxml.jackson.core.base.ParserMinimalBase._reportError(ParserMinimalBase.java:752)
    at com.fasterxml.jackson.core.base.ParserMinimalBase._reportUnexpectedChar(ParserMinimalBase.java:676)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._handleOddName(UTF8StreamJsonParser.java:2147)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._parseName(UTF8StreamJsonParser.java:1797)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser.nextToken(UTF8StreamJsonParser.java:801)
    at org.owasp.dependencycheck.reporting.ReportGenerator.pretifyJson(ReportGenerator.java:574)
    ... 8 common frames omitted
2023-12-07 07:20:03,687 org.owasp.dependencycheck.data.nvdcve.CveDB:310
DEBUG - Closing database
2023-12-07 07:20:03,688 org.owasp.dependencycheck.data.nvdcve.CveDB:312
DEBUG - Cache cleared
2023-12-07 07:20:03,691 org.owasp.dependencycheck.data.nvdcve.CveDB:315
DEBUG - Connection closed
2023-12-07 07:20:03,691 org.owasp.dependencycheck.data.nvdcve.CveDB:321
DEBUG - Resources released
2023-12-07 07:20:03,691 org.owasp.dependencycheck.data.nvdcve.DriverLoader:57
DEBUG - Begin deregister driver
2023-12-07 07:20:03,692 org.owasp.dependencycheck.data.nvdcve.DriverLoader:59
DEBUG - End deregister driver
2023-12-07 07:20:03,724 org.owasp.dependencycheck.App:204
ERROR - Error generating the report for 
2023-12-07 07:20:03,724 org.owasp.dependencycheck.App:205
DEBUG - report exception
org.owasp.dependencycheck.exception.ReportException: Error generating the report for 
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1268)
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1213)
    at org.owasp.dependencycheck.App.runScan(App.java:272)
    at org.owasp.dependencycheck.App.run(App.java:194)
    at org.owasp.dependencycheck.App.main(App.java:89)
Caused by: org.owasp.dependencycheck.exception.ReportException: Unable to generate json report
    at org.owasp.dependencycheck.reporting.ReportGenerator.pretifyJson(ReportGenerator.java:580)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:363)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:353)
    at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:327)
    at org.owasp.dependencycheck.Engine.writeReports(Engine.java:1264)
    ... 4 common frames omitted
Caused by: com.fasterxml.jackson.core.JsonParseException: Unexpected character ('}' (code 125)): was expecting double-quote to start field name
 at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 172192]
    at com.fasterxml.jackson.core.JsonParser._constructError(JsonParser.java:2481)
    at com.fasterxml.jackson.core.base.ParserMinimalBase._reportError(ParserMinimalBase.java:752)
    at com.fasterxml.jackson.core.base.ParserMinimalBase._reportUnexpectedChar(ParserMinimalBase.java:676)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._handleOddName(UTF8StreamJsonParser.java:2147)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser._parseName(UTF8StreamJsonParser.java:1797)
    at com.fasterxml.jackson.core.json.UTF8StreamJsonParser.nextToken(UTF8StreamJsonParser.java:801)
    at org.owasp.dependencycheck.reporting.ReportGenerator.pretifyJson(ReportGenerator.java:574)
    ... 8 common frames omitted
2023-12-07 07:20:03,725 org.owasp.dependencycheck.utils.Settings:878
DEBUG - Deleting ALL temporary files from `/tmp/dctemp14288f55-e20b-4195-b681-20aa4cbb80a4`
2023-12-07 07:20:03,807 org.owasp.dependencycheck.App:90
DEBUG - Exit code: 12

To Reproduce Steps to reproduce the behavior:

  1. run dependency-check
  2. See error Exit code: 12

Expected behavior A clear and concise description of what you expected to happen.

Additional context Add any other context about the problem here.

readonlyuser1 commented 9 months ago

after replacing -f ALL with -f XML -f HTML -f SARIF -f GITLAB -f CSV -f JUNIT

DEBUG - 
----------------------------------------------------
END ANALYSIS
----------------------------------------------------
2023-12-07 07:40:00,117 org.owasp.dependencycheck.Engine:691
INFO  - Analysis Complete (98 seconds)
2023-12-07 07:40:00,141 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:40:00,141 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:40:00,147 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:40:00,154 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:40:00,155 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:40:00,156 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:40:00,158 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:40:00,159 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:40:00,160 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:40:00,160 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:40:00,161 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:40:00,162 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:40:00,164 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:40:00,164 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:40:00,193 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:40:00,211 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:40:00,213 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:40:00,213 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:40:00,213 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:40:00,214 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:40:00,214 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:40:00,214 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:40:00,224 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing XML report to: /builds/xxx/sss/pppppp/dependency-check-report.xml
2023-12-07 07:40:00,306 org.apache.velocity.runtime.VelocimacroFactory:385
DEBUG - added VM writeXmlException: source=org.apache.velocity.Template@67fc2aad
2023-12-07 07:40:02,167 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:40:02,167 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:40:02,169 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:40:02,169 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:40:02,170 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:40:02,170 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:40:02,170 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:40:02,170 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:40:02,170 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:40:02,170 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:40:02,171 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:40:02,171 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:40:02,171 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:40:02,171 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:40:02,172 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:40:02,172 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:40:02,173 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing HTML report to: /builds/xxx/sss/pppppp/dependency-check-report.html
2023-12-07 07:40:02,251 org.apache.velocity.runtime.VelocimacroFactory:385
DEBUG - added VM writeHtmlException: source=org.apache.velocity.Template@3cd9aa64
2023-12-07 07:40:02,556 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:40:02,557 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:40:02,558 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:40:02,559 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:40:02,559 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:40:02,559 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:40:02,560 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:40:02,561 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:40:02,562 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:40:02,563 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing SARIF report to: /builds/xxx/sss/pppppp/dependency-check-report.sarif
2023-12-07 07:40:02,576 org.apache.velocity.runtime.parser.node.ASTReference:608
DEBUG - Null reference [template 'templates/sarifReport.vsl', line 2, column 2]: $schema cannot be resolved.
2023-12-07 07:40:02,623 org.owasp.dependencycheck.reporting.ReportGenerator:560
DEBUG - pretify json: /builds/xxx/sss/pppppp/dependency-check-report.sarif
2023-12-07 07:40:03,669 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:40:03,669 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:40:03,671 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:40:03,671 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:40:03,671 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:40:03,671 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:40:03,671 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:40:03,672 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:40:03,673 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:40:03,673 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:40:03,673 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:40:03,673 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:40:03,673 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:40:03,673 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:40:03,673 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:40:03,674 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:40:03,674 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing GITLAB report to: /builds/xxx/sss/pppppp/dependency-check-gitlab.json
2023-12-07 07:40:03,712 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:40:03,712 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:40:03,713 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:40:03,713 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:40:03,713 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:40:03,713 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:40:03,714 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:40:03,715 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:40:03,715 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:40:03,715 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:40:03,716 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:40:03,716 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:40:03,716 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:40:03,716 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:40:03,716 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:40:03,716 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing CSV report to: /builds/xxx/sss/pppppp/dependency-check-report.csv
2023-12-07 07:40:03,754 org.apache.velocity.runtime.RuntimeInstance:272
DEBUG - Initializing Velocity, Calling init()...
2023-12-07 07:40:03,754 org.apache.velocity.runtime.RuntimeInstance:276
DEBUG - Starting Apache Velocity v2.3
2023-12-07 07:40:03,755 org.apache.velocity.runtime.RuntimeInstance:522
DEBUG - Default Properties resource: org/apache/velocity/runtime/defaults/velocity.properties
2023-12-07 07:40:03,755 org.apache.velocity.runtime.resource.loader.ResourceLoaderFactory:48
DEBUG - ResourceLoader instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
2023-12-07 07:40:03,755 org.apache.velocity.runtime.resource.loader.FileResourceLoader:84
DEBUG - FileResourceLoader: adding path '.'
2023-12-07 07:40:03,755 org.apache.velocity.runtime.resource.ResourceCacheImpl:119
DEBUG - initialized (class org.apache.velocity.runtime.resource.ResourceCacheImpl) with class java.util.Collections$SynchronizedMap cache map.
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Stop
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Define
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Break
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Evaluate
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Macro
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Parse
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Include
2023-12-07 07:40:03,756 org.apache.velocity.runtime.RuntimeInstance:1081
DEBUG - Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
2023-12-07 07:40:03,757 org.apache.velocity.runtime.ParserPoolImpl:57
DEBUG - Created '20' parsers.
2023-12-07 07:40:03,757 org.apache.velocity.runtime.VelocimacroFactory:152
DEBUG - "velocimacro.library.path" is not set. Trying default library: velocimacros.vtl
2023-12-07 07:40:03,757 org.apache.velocity.runtime.VelocimacroFactory:162
DEBUG - Default library velocimacros.vtl not found. Trying old default library: VM_global_library.vm
2023-12-07 07:40:03,757 org.apache.velocity.runtime.VelocimacroFactory:169
DEBUG - Old default library VM_global_library.vm not found.
2023-12-07 07:40:03,757 org.apache.velocity.runtime.VelocimacroFactory:253
DEBUG - allowInline = true: VMs can be defined inline in templates
2023-12-07 07:40:03,758 org.apache.velocity.runtime.VelocimacroFactory:274
DEBUG - allowInlineToOverride = false: VMs defined inline may NOT replace previous VM definitions
2023-12-07 07:40:03,758 org.apache.velocity.runtime.VelocimacroFactory:297
DEBUG - allowInlineLocal = false: VMs defined inline will be global in scope if allowed.
2023-12-07 07:40:03,758 org.apache.velocity.runtime.VelocimacroFactory:315
DEBUG - autoload off: VM system will not automatically reload global library macros
2023-12-07 07:40:03,758 org.owasp.dependencycheck.reporting.ReportGenerator:359
INFO  - Writing JUNIT report to: /builds/xxx/sss/pppppp/dependency-check-junit.xml
2023-12-07 07:40:04,824 org.owasp.dependencycheck.data.nvdcve.CveDB:310
DEBUG - Closing database
2023-12-07 07:40:04,824 org.owasp.dependencycheck.data.nvdcve.CveDB:312
DEBUG - Cache cleared
2023-12-07 07:40:04,827 org.owasp.dependencycheck.data.nvdcve.CveDB:315
DEBUG - Connection closed
2023-12-07 07:40:04,827 org.owasp.dependencycheck.data.nvdcve.CveDB:321
DEBUG - Resources released
2023-12-07 07:40:04,827 org.owasp.dependencycheck.data.nvdcve.DriverLoader:57
DEBUG - Begin deregister driver
2023-12-07 07:40:04,827 org.owasp.dependencycheck.data.nvdcve.DriverLoader:59
DEBUG - End deregister driver
2023-12-07 07:40:04,845 org.owasp.dependencycheck.utils.Settings:878
DEBUG - Deleting ALL temporary files from `/tmp/dctempa7aacd64-2ee0-404f-b052-14475b9a4ba6`
2023-12-07 07:40:04,892 org.owasp.dependencycheck.App:90
DEBUG - Exit code: 0
jeremylong commented 9 months ago

I'm betting that this is related to #6243 - which will be fixed in 9.0.4