search

jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
https://owasp.org/www-project-dependency-check/
Apache License 2.0
6.43k stars 1.28k forks source link

Error occurred connecting to the local database #827

Closed giovaneliberato closed 7 years ago

giovaneliberato commented 7 years ago

Hi everyone!

I'm running dependency check as a part of a CI pipeline in a Jenkins instance and suddenly this connection error started to happen. This is the second time we see this local database, but in the first time the job went back to normal after a few hours.

Here's the plugin configuration. Note that I added <connectionString> after trying to solve this error based on #410 

<plugin>
    <groupId>org.owasp</groupId>
    <artifactId>dependency-check-maven</artifactId>
    <version>2.0.1</version>
    <configuration>
        <failBuildOnCVSS>8</failBuildOnCVSS>
        <skipProvidedScope>true</skipProvidedScope>
        <outputDirectory>${project.build.directory}/reports/owasp</outputDirectory>
        <nuspecAnalyzerEnabled>false</nuspecAnalyzerEnabled>
        <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
        <connectionString>jdbc:h2:file:%s;FILE_LOCK=FS;AUTOCOMMIT=ON;</connectionString>
    </configuration>
    <executions>
        <execution>
            <goals>
                <goal>check</goal>
            </goals>
        </execution>
    </executions>
</plugin>

Here's the stacktrace that jenkins is outputting 

[ERROR] Failed to execute goal org.owasp:dependency-check-maven:2.0.1:check (default-cli) on project default: An exception occurred connecting to the local database. Please see the log file for more details. Unable to connect to the database -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.owasp:dependency-check-maven:2.0.1:check (default-cli) on project default: An exception occurred connecting to the local database. Please see the log file for more details.
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:216)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:116)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:188)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:184)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.maven.plugin.MojoExecutionException: An exception occurred connecting to the local database. Please see the log file for more details.
    at org.owasp.dependencycheck.maven.CheckMojo.runCheck(CheckMojo.java:95)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute(BaseDependencyCheckMojo.java:514)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:132)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:208)
    ... 11 more
Caused by: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Unable to connect to the database
    at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.initialize(ConnectionFactory.java:164)
    at org.owasp.dependencycheck.Engine.initializeEngine(Engine.java:129)
    at org.owasp.dependencycheck.Engine.<init>(Engine.java:106)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.initializeEngine(BaseDependencyCheckMojo.java:881)
    at org.owasp.dependencycheck.maven.CheckMojo.runCheck(CheckMojo.java:88)
    ... 14 more
[ERROR] 
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException

Is this a know bug our a maven issue? Couldn't find any fixes or documentation for this error. If you need any more information please get in touch!

Thanks!

jeremylong commented 7 years ago

Any chance you could add -X to the execution of mvn on the failing build and provide the additional details contained (related to dependency-check's execution)?

giovaneliberato commented 7 years ago

Here it is. I omitted some private information but the whole execution is there

[INFO] Error stacktraces are turned on.
[DEBUG] Reading global settings from /opt/apache-maven/apache-maven-3.2.3/conf/settings.xml
[DEBUG] Reading user settings from /home/web/.m2/settings.xml
[DEBUG] Using local repository at /home/web/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/web/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project com.api:default:war:2.5-SNAPSHOT: (none)
[DEBUG] Looking up lifecyle mappings for packaging war from ClassRealm[plexus.core, parent: null]
[DEBUG] Extension realms for project com.api:defaultParent:pom:2.5-SNAPSHOT: (none)
[DEBUG] Looking up lifecyle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix dependency-check from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix dependency-check to org.owasp:dependency-check-maven from POM com.api:default:war:2.5-SNAPSHOT
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: com.api:default:war:2.5-SNAPSHOT
[DEBUG] Tasks:   [dependency-check:check]
[DEBUG] Style:   Regular
[DEBUG] =======================================================================
[INFO] 
[INFO] Using the MultiThreadedBuilder implementation with a thread count of 128
[DEBUG] Scheduling: MavenProject: com.api:default:2.5-SNAPSHOT @ pom.xml
[INFO]                                                                         
[INFO] ------------------------------------------------------------------------
[INFO] Building project
[INFO] ------------------------------------------------------------------------
[DEBUG] Resolving plugin prefix dependency-check from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix dependency-check to org.owasp:dependency-check-maven from POM com.api:default:war:2.5-SNAPSHOT
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project:       com.api:default:2.5-SNAPSHOT
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): [compile+runtime]
[DEBUG] Repositories (dependencies): [spring.io (http://repo.spring.io/libs-release-remote, releases+snapshots), central (https://repo.maven.apache.org/maven2, releases)]
[DEBUG] Repositories (plugins)     : [omitted]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal:          org.owasp:dependency-check-maven:2.0.1:check (default-cli)
[DEBUG] Style:         Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <aggregate>${aggregate}</aggregate>
  <archiveAnalyzerEnabled>${archiveAnalyzerEnabled}</archiveAnalyzerEnabled>
  <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
  <autoUpdate>${autoUpdate}</autoUpdate>
  <autoconfAnalyzerEnabled>${autoconfAnalyzerEnabled}</autoconfAnalyzerEnabled>
  <bundleAuditAnalyzerEnabled>${bundleAuditAnalyzerEnabled}</bundleAuditAnalyzerEnabled>
  <bundleAuditPath default-value="">${bundleAuditPath}</bundleAuditPath>
  <centralAnalyzerEnabled>${centralAnalyzerEnabled}</centralAnalyzerEnabled>
  <cmakeAnalyzerEnabled>${cmakeAnalyzerEnabled}</cmakeAnalyzerEnabled>
  <cocoapodsAnalyzerEnabled>${cocoapodsAnalyzerEnabled}</cocoapodsAnalyzerEnabled>
  <composerAnalyzerEnabled>${composerAnalyzerEnabled}</composerAnalyzerEnabled>
  <connectionString default-value="">jdbc:h2:file:%s;FILE_LOCK=FS;AUTOCOMMIT=ON;</connectionString>
  <connectionTimeout default-value="">${connectionTimeout}</connectionTimeout>
  <cveUrl12Base default-value="">${cveUrl12Base}</cveUrl12Base>
  <cveUrl12Modified default-value="">${cveUrl12Modified}</cveUrl12Modified>
  <cveUrl20Base default-value="">${cveUrl20Base}</cveUrl20Base>
  <cveUrl20Modified default-value="">${cveUrl20Modified}</cveUrl20Modified>
  <cveValidForHours default-value="">${cveValidForHours}</cveValidForHours>
  <dataDirectory default-value="">${dataDirectory}</dataDirectory>
  <dataFileName default-value="dependency-check.ser">${metaFileName}</dataFileName>
  <databaseDriverName default-value="">${databaseDriverName}</databaseDriverName>
  <databaseDriverPath default-value="">${databaseDriverPath}</databaseDriverPath>
  <databasePassword default-value="">${databasePassword}</databasePassword>
  <databaseUser default-value="">${databaseUser}</databaseUser>
  <enableExperimental>${enableExperimental}</enableExperimental>
  <externalReport>${externalReport}</externalReport>
  <failBuildOnAnyVulnerability default-value="false">${failBuildOnAnyVulnerability}</failBuildOnAnyVulnerability>
  <failBuildOnCVSS default-value="11">8</failBuildOnCVSS>
  <failOnError default-value="true">${failOnError}</failOnError>
  <format default-value="HTML">${format}</format>
  <hintsFile default-value="">${hintsFile}</hintsFile>
  <jarAnalyzerEnabled>${jarAnalyzerEnabled}</jarAnalyzerEnabled>
  <mavenSettings default-value="${settings}">${mavenSettings}</mavenSettings>
  <mavenSettingsProxyId>${mavenSettingsProxyId}</mavenSettingsProxyId>
  <name default-value="dependency-check">${name}</name>
  <nexusAnalyzerEnabled>${nexusAnalyzerEnabled}</nexusAnalyzerEnabled>
  <nexusUrl>${nexusUrl}</nexusUrl>
  <nexusUsesProxy>${nexusUsesProxy}</nexusUsesProxy>
  <nodeAnalyzerEnabled>${nodeAnalyzerEnabled}</nodeAnalyzerEnabled>
  <nspAnalyzerEnabled>${nspAnalyzerEnabled}</nspAnalyzerEnabled>
  <nuspecAnalyzerEnabled>false</nuspecAnalyzerEnabled>
  <opensslAnalyzerEnabled>${opensslAnalyzerEnabled}</opensslAnalyzerEnabled>
  <outputDirectory default-value="${project.build.directory}">target/reports/owasp</outputDirectory>
  <pathToMono default-value="">${pathToMono}</pathToMono>
  <project>${project}</project>
  <proxyUrl default-value="">${proxyUrl}</proxyUrl>
  <pyDistributionAnalyzerEnabled>${pyDistributionAnalyzerEnabled}</pyDistributionAnalyzerEnabled>
  <pyPackageAnalyzerEnabled>${pyPackageAnalyzerEnabled}</pyPackageAnalyzerEnabled>
  <reactorProjects>${reactorProjects}</reactorProjects>
  <remoteRepositories default-value="${project.remoteArtifactRepositories}"/>
  <reportOutputDirectory>${project.reporting.outputDirectory}</reportOutputDirectory>
  <rubygemsAnalyzerEnabled>${rubygemsAnalyzerEnabled}</rubygemsAnalyzerEnabled>
  <serverId default-value="">${serverId}</serverId>
  <session default-value="${session}"/>
  <settingsXml default-value="${settings}"/>
  <showSummary default-value="true">${showSummary}</showSummary>
  <skip default-value="false">${dependency-check.skip}</skip>
  <skipArtifactType>${skipArtifactType}</skipArtifactType>
  <skipProvidedScope default-value="false">true</skipProvidedScope>
  <skipRuntimeScope default-value="false">${skipRuntimeScope}</skipRuntimeScope>
  <skipSystemScope default-value="false">${skipSystemScope}</skipSystemScope>
  <skipTestScope default-value="true">${skipTestScope}</skipTestScope>
  <swiftPackageManagerAnalyzerEnabled>${swiftPackageManagerAnalyzerEnabled}</swiftPackageManagerAnalyzerEnabled>
  <zipExtensions>${zipExtensions}</zipExtensions>
</configuration>
[DEBUG] =======================================================================
[WARNING] *****************************************************************
[WARNING] * Your build is requesting parallel execution, but project      *
[WARNING] * contains the following plugin(s) that have goals not marked   *
[WARNING] * as @threadSafe to support parallel building.                  *
[WARNING] * While this /may/ work fine, please look for plugin updates    *
[WARNING] * and/or request plugins be made thread-safe.                   *
[WARNING] * If reporting an issue, report it against the plugin in        *
[WARNING] * question, not against maven-core                              *
[WARNING] *****************************************************************
[WARNING] The following goals are not marked @threadSafe in project:
[WARNING] org.owasp:dependency-check-maven:2.0.1:check
[WARNING] *****************************************************************
[DEBUG] Dependency collection stats: {ConflictMarker.analyzeTime=9, ConflictMarker.markTime=4, ConflictMarker.nodeCount=1417, ConflictIdSorter.graphTime=4, ConflictIdSorter.topsortTime=1, ConflictIdSorter.conflictIdCount=305, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=96, ConflictResolver.conflictItemCount=700, DefaultDependencyCollector.collectTime=1959, DefaultDependencyCollector.transformTime=117}
[DEBUG] com.api:default:war:2.5-SNAPSHOT
[DEBUG]    org.springframework:spring-web:jar:4.3.7.RELEASE:compile
[DEBUG]       org.springframework:spring-aop:jar:4.3.7.RELEASE:compile
[DEBUG]       org.springframework:spring-beans:jar:4.3.7.RELEASE:compile
[DEBUG]       org.springframework:spring-core:jar:4.3.7.RELEASE:compile
[DEBUG]    org.springframework:spring-context:jar:4.3.7.RELEASE:compile
[DEBUG]       org.springframework:spring-expression:jar:4.3.7.RELEASE:compile
[DEBUG]    org.springframework:spring-context-support:jar:4.3.7.RELEASE:compile
[DEBUG]    org.springframework:spring-orm:jar:4.3.7.RELEASE:compile
[DEBUG]       org.springframework:spring-jdbc:jar:4.3.7.RELEASE:compile
[DEBUG]    org.springframework:spring-tx:jar:4.3.7.RELEASE:compile
[DEBUG]    io.dropwizard.metrics:metrics-jvm:jar:3.2.2:compile
[DEBUG]       io.dropwizard.metrics:metrics-core:jar:3.2.2:compile
[DEBUG]       org.slf4j:slf4j-api:jar:1.7.22:compile
[DEBUG]    com.ryantenney.metrics:metrics-spring:jar:3.1.3:compile
[DEBUG]       io.dropwizard.metrics:metrics-healthchecks:jar:3.1.2:compile
[DEBUG]       io.dropwizard.metrics:metrics-annotation:jar:3.1.2:compile
[DEBUG]    io.dropwizard.metrics:metrics-httpclient:jar:3.2.2:compile
[DEBUG]    commons-beanutils:commons-beanutils:jar:1.9.3:compile
[DEBUG]       commons-collections:commons-collections:jar:3.2.2:compile
[DEBUG]    org.togglz:togglz-servlet:jar:2.4.1.Final:compile
[DEBUG]       org.togglz:togglz-core:jar:2.4.1.Final:compile
[DEBUG]    org.togglz:togglz-spring:jar:2.1.0.Final:compile
[DEBUG]    org.jsoup:jsoup:jar:1.10.3:compile
[DEBUG]    org.jboss.resteasy:resteasy-client:jar:3.0.22.Final:compile
[DEBUG]       org.jboss.resteasy:resteasy-jaxrs:jar:3.0.22.Final:compile
[DEBUG]          org.jboss.spec.javax.annotation:jboss-annotations-api_1.2_spec:jar:1.0.0.Final:compile
[DEBUG]          commons-io:commons-io:jar:2.5:compile
[DEBUG]          net.jcip:jcip-annotations:jar:1.0:compile
[DEBUG]       org.jboss.logging:jboss-logging:jar:3.3.0.Final:compile
[DEBUG]    org.jboss.resteasy:resteasy-spring:jar:3.0.22.Final:compile
[DEBUG]       javax.activation:activation:jar:1.1.1:compile
[DEBUG]    org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.0_spec:jar:1.0.0.Final:compile
[DEBUG]    org.jboss.resteasy:resteasy-validator-provider-11:jar:3.0.22.Final:compile
[DEBUG]    org.apache.httpcomponents:httpclient:jar:4.5.3:compile
[DEBUG]       org.apache.httpcomponents:httpcore:jar:4.4.6:compile
[DEBUG]       commons-logging:commons-logging:jar:1.2:compile
[DEBUG]       commons-codec:commons-codec:jar:1.9:compile
[DEBUG]    org.apache.commons:commons-lang3:jar:3.5:compile
[DEBUG]    org.apache.commons:commons-collections4:jar:4.1:compile
[DEBUG]    commons-validator:commons-validator:jar:1.6:compile
[DEBUG]       commons-digester:commons-digester:jar:1.8.1:compile
[DEBUG]    org.apache.tomcat:tomcat-jdbc:jar:8.5.15:compile
[DEBUG]       org.apache.tomcat:tomcat-juli:jar:8.5.15:compile
[DEBUG]    org.apache.tomcat.embed:tomcat-embed-core:jar:7.0.57:test
[DEBUG]    org.apache.tomcat.embed:tomcat-embed-logging-juli:jar:7.0.57:test
[DEBUG]    org.eclipse.jdt.core.compiler:ecj:jar:3.7.2:test
[DEBUG]    org.apache.tomcat.embed:tomcat-embed-jasper:jar:7.0.57:test
[DEBUG]       org.apache.tomcat.embed:tomcat-embed-el:jar:7.0.57:test
[DEBUG]    org.togglz:togglz-testing:jar:2.4.1.Final:test
[DEBUG]    org.togglz:togglz-junit:jar:2.4.1.Final:test
[DEBUG]    org.glassfish.jersey.containers:jersey-container-servlet:jar:2.25.1:test
[DEBUG]       org.glassfish.jersey.containers:jersey-container-servlet-core:jar:2.25.1:test
[DEBUG]       org.glassfish.jersey.core:jersey-common:jar:2.25.1:test
[DEBUG]          javax.annotation:javax.annotation-api:jar:1.2:test
[DEBUG]          org.glassfish.jersey.bundles.repackaged:jersey-guava:jar:2.25.1:test
[DEBUG]          org.glassfish.hk2:osgi-resource-locator:jar:1.0.1:test
[DEBUG]       org.glassfish.jersey.core:jersey-server:jar:2.25.1:test
[DEBUG]          org.glassfish.jersey.media:jersey-media-jaxb:jar:2.25.1:test
[DEBUG]       javax.ws.rs:javax.ws.rs-api:jar:2.0.1:test
[DEBUG]    org.glassfish.jersey.core:jersey-client:jar:2.25.1:test
[DEBUG]       org.glassfish.hk2:hk2-api:jar:2.5.0-b32:test
[DEBUG]          org.glassfish.hk2:hk2-utils:jar:2.5.0-b32:test
[DEBUG]          org.glassfish.hk2.external:aopalliance-repackaged:jar:2.5.0-b32:test
[DEBUG]       org.glassfish.hk2.external:javax.inject:jar:2.5.0-b32:test
[DEBUG]       org.glassfish.hk2:hk2-locator:jar:2.5.0-b32:test
[DEBUG]    org.glassfish.jersey.media:jersey-media-moxy:jar:2.25.1:test
[DEBUG]       org.glassfish.jersey.ext:jersey-entity-filtering:jar:2.25.1:test
[DEBUG]       org.eclipse.persistence:org.eclipse.persistence.moxy:jar:2.6.0:test
[DEBUG]          org.eclipse.persistence:org.eclipse.persistence.core:jar:2.6.0:test
[DEBUG]             org.eclipse.persistence:org.eclipse.persistence.asm:jar:2.6.0:test
[DEBUG]          org.glassfish:javax.json:jar:1.0.4:test
[DEBUG]    org.springframework:spring-test:jar:4.3.7.RELEASE:test
[DEBUG]    com.github.v-ladynev:fluent-hibernate-core:jar:0.3.1:test
[DEBUG]    com.google.guava:guava:jar:19.0:compile
[DEBUG]    org.projectlombok:lombok:jar:1.16.16:compile
[DEBUG]    org.json:json:jar:20160212:compile
[DEBUG]    com.jcraft:jsch:jar:0.1.54:compile
           [ omitted ]
[DEBUG]    org.springframework.amqp:spring-rabbit:jar:1.7.3.RELEASE:compile
[DEBUG]       org.springframework:spring-messaging:jar:4.3.9.RELEASE:compile
[DEBUG]       com.rabbitmq:http-client:jar:1.1.1.RELEASE:compile
[DEBUG]       org.springframework.retry:spring-retry:jar:1.2.0.RELEASE:compile
[DEBUG]       org.springframework.amqp:spring-amqp:jar:1.7.3.RELEASE:compile
[DEBUG]    org.jadira.usertype:usertype.extended:jar:3.2.0.GA:compile
[DEBUG]       org.jadira.usertype:usertype.spi:jar:3.2.0.GA:compile
[DEBUG]       org.jadira.usertype:usertype.core:jar:3.2.0.GA:compile
[DEBUG]    com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.8.8:compile
[DEBUG]       com.fasterxml.jackson.core:jackson-annotations:jar:2.8.0:compile
[DEBUG]       com.fasterxml.jackson.core:jackson-core:jar:2.8.8:compile
[DEBUG]       com.fasterxml.jackson.core:jackson-databind:jar:2.8.8:compile
[DEBUG]       joda-time:joda-time:jar:2.7:compile
[DEBUG]    com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.8.8:compile
[DEBUG]       com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:jar:2.8.8:compile
[DEBUG]       com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.8.8:compile
[DEBUG]    net.sf.ehcache:ehcache:jar:2.10.4:compile
[DEBUG]    org.springframework.ws:spring-ws-test:jar:2.4.0.RELEASE:test
[DEBUG]       org.springframework.ws:spring-xml:jar:2.4.0.RELEASE:compile
[DEBUG]       xmlunit:xmlunit:jar:1.5:test
[DEBUG]    lpp:payclub-plugin:jar:1.1.3:compile
[DEBUG]       net.freeutils:jcharset:jar:1.6:runtime
[DEBUG]       org.bouncycastle:bcpkix-jdk15on:jar:1.56:runtime
[DEBUG]    org.bouncycastle:bcprov-jdk15on:jar:1.56:compile
[DEBUG]    org.springframework.ws:spring-ws-core:jar:2.4.0.RELEASE:compile
[DEBUG]       org.springframework:spring-oxm:jar:4.2.7.RELEASE:compile
[DEBUG]       org.springframework:spring-webmvc:jar:4.2.7.RELEASE:compile
[DEBUG]    org.springframework.ws:spring-ws-security:jar:2.4.0.RELEASE:compile
[DEBUG]       org.springframework.security:spring-security-core:jar:4.0.4.RELEASE:compile
[DEBUG]          aopalliance:aopalliance:jar:1.0:compile
[DEBUG]    org.springframework.ws:spring-ws-support:jar:2.4.0.RELEASE:compile
[DEBUG]       org.springframework:spring-jms:jar:4.2.7.RELEASE:compile
[DEBUG]    org.apache.santuario:xmlsec:jar:2.0.8:compile
[DEBUG]       org.codehaus.woodstox:woodstox-core-asl:jar:4.4.1:compile
[DEBUG]          org.codehaus.woodstox:stax2-api:jar:3.1.4:compile
[DEBUG]    org.apache.ws.commons.axiom:axiom-impl:jar:1.2.20:compile
[DEBUG]       org.apache.ws.commons.axiom:axiom-api:jar:1.2.20:compile
[DEBUG]          org.apache.geronimo.specs:geronimo-activation_1.1_spec:jar:1.1:compile
[DEBUG]          jaxen:jaxen:jar:1.1.6:compile
[DEBUG]          org.apache.geronimo.specs:geronimo-stax-api_1.0_spec:jar:1.0.1:compile
[DEBUG]          org.apache.james:apache-mime4j-core:jar:0.7.2:compile
[DEBUG]    com.sun.xml.stream:sjsxp:jar:1.0.2:compile
[DEBUG]       javax.xml.stream:stax-api:jar:1.0:compile
[DEBUG]    org.hamcrest:hamcrest-core:jar:1.3:test
[DEBUG]    org.hamcrest:hamcrest-library:jar:1.3:test
[DEBUG]    org.mockito:mockito-core:jar:1.10.19:test
[DEBUG]       org.objenesis:objenesis:jar:2.1:test
[DEBUG]    junit:junit:jar:4.12:test
[DEBUG]    com.jcabi:jcabi-matchers:jar:1.4:compile
[DEBUG]       com.jcabi:jcabi-log:jar:0.17.2:compile
[DEBUG]          com.jcabi:jcabi-aspects:jar:0.22:compile
[DEBUG]       org.glassfish.jaxb:jaxb-runtime:jar:2.2.11:runtime
[DEBUG]          org.glassfish.jaxb:jaxb-core:jar:2.2.11:runtime
[DEBUG]             javax.xml.bind:jaxb-api:jar:2.2.12-b140109.1041:runtime
[DEBUG]             org.glassfish.jaxb:txw2:jar:2.2.11:runtime
[DEBUG]             com.sun.istack:istack-commons-runtime:jar:2.21:runtime
[DEBUG]          org.jvnet.staxex:stax-ex:jar:1.7.7:runtime
[DEBUG]          com.sun.xml.fastinfoset:FastInfoset:jar:1.2.13:runtime
[DEBUG]    com.github.tomakehurst:wiremock:jar:2.6.0:test
[DEBUG]       org.eclipse.jetty:jetty-server:jar:9.2.13.v20150730:compile
[DEBUG]          javax.servlet:javax.servlet-api:jar:3.1.0:compile
[DEBUG]       org.eclipse.jetty:jetty-servlet:jar:9.2.13.v20150730:test
[DEBUG]       org.eclipse.jetty:jetty-servlets:jar:9.2.13.v20150730:test
[DEBUG]       org.eclipse.jetty:jetty-webapp:jar:9.2.13.v20150730:test
[DEBUG]          org.eclipse.jetty:jetty-xml:jar:9.2.13.v20150730:test
[DEBUG]       org.xmlunit:xmlunit-core:jar:2.3.0:test
[DEBUG]       org.xmlunit:xmlunit-legacy:jar:2.3.0:test
[DEBUG]       com.jayway.jsonpath:json-path:jar:2.2.0:test
[DEBUG]          net.minidev:json-smart:jar:2.2.1:test
[DEBUG]             net.minidev:accessors-smart:jar:1.1:test
[DEBUG]       net.sf.jopt-simple:jopt-simple:jar:4.9:test
[DEBUG]       com.flipkart.zjsonpatch:zjsonpatch:jar:0.3.0:test
[DEBUG]       com.github.jknack:handlebars:jar:4.0.6:test
[DEBUG]          org.antlr:antlr4-runtime:jar:4.5.1-1:test
[DEBUG]    ch.qos.logback:logback-classic:jar:1.2.3:compile
[DEBUG]       ch.qos.logback:logback-core:jar:1.2.3:compile
[DEBUG]    org.slf4j:log4j-over-slf4j:jar:1.7.25:compile
[DEBUG]    org.slf4j:jcl-over-slf4j:jar:1.7.25:compile
[DEBUG]    spy:spymemcached:jar:2.8.12:compile
[DEBUG]    cglib:cglib:jar:2.2.2:compile
[DEBUG]       asm:asm:jar:3.3.1:compile
[DEBUG]    org.hibernate:hibernate-entitymanager:jar:4.3.11.Final:compile
[DEBUG]       org.jboss.logging:jboss-logging-annotations:jar:1.2.0.Beta1:compile
[DEBUG]       dom4j:dom4j:jar:1.6.1:compile
[DEBUG]          xml-apis:xml-apis:jar:1.0.b2:compile
[DEBUG]       org.hibernate.common:hibernate-commons-annotations:jar:4.0.5.Final:compile
[DEBUG]       org.hibernate.javax.persistence:hibernate-jpa-2.1-api:jar:1.0.0.Final:compile
[DEBUG]       org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec:jar:1.0.0.Final:compile
[DEBUG]       org.javassist:javassist:jar:3.18.1-GA:compile
[DEBUG]    org.hibernate:hibernate-core:jar:4.3.11.Final:compile
[DEBUG]       antlr:antlr:jar:2.7.7:compile
[DEBUG]       org.jboss:jandex:jar:1.1.0.Final:compile
[DEBUG]    com.rabbitmq:amqp-client:jar:4.1.1:compile
[DEBUG]    org.jboss.resteasy:resteasy-jackson2-provider:jar:3.0.22.Final:compile
[DEBUG]    mysql:mysql-connector-java:jar:5.1.42:provided
[DEBUG]    org.hibernate:hibernate-validator:jar:5.4.1.Final:compile
[DEBUG]       javax.validation:validation-api:jar:1.1.0.Final:compile
[DEBUG]       com.fasterxml:classmate:jar:1.3.1:compile
[DEBUG]    org.glassfish.web:el-impl:jar:2.2:provided
[DEBUG]       javax.el:el-api:jar:2.2:provided
[DEBUG]    com.h2database:h2:jar:1.4.196:compile
[DEBUG]    io.swagger:swagger-jaxrs:jar:1.5.13:compile
[DEBUG]       io.swagger:swagger-core:jar:1.5.13:compile
[DEBUG]          com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.8.5:compile
[DEBUG]             org.yaml:snakeyaml:jar:1.17:compile
[DEBUG]          io.swagger:swagger-models:jar:1.5.13:compile
[DEBUG]             io.swagger:swagger-annotations:jar:1.5.13:compile
[DEBUG]       javax.ws.rs:jsr311-api:jar:1.1.1:compile
[DEBUG]       org.reflections:reflections:jar:0.9.10:compile
[DEBUG]          com.google.code.findbugs:annotations:jar:2.0.1:compile
[DEBUG]    org.skyscreamer:jsonassert:jar:1.5.0:test
[DEBUG]       com.vaadin.external.google:android-json:jar:0.0.20131108.vaadin1:test
[DEBUG]    com.hazelcast:hazelcast:jar:3.8.2:compile
[DEBUG]    au.com.dius:pact-jvm-consumer-junit_2.11:jar:2.5.0-beta.0:compile
[DEBUG]       org.scala-lang:scala-library:jar:2.11.8:compile
[DEBUG]       org.scala-lang:scala-compiler:jar:2.11.8:compile
[DEBUG]          org.scala-lang:scala-reflect:jar:2.11.8:compile
[DEBUG]          org.scala-lang.modules:scala-xml_2.11:jar:1.0.4:compile
[DEBUG]          org.scala-lang.modules:scala-parser-combinators_2.11:jar:1.0.4:compile
[DEBUG]       com.typesafe.scala-logging:scala-logging_2.11:jar:3.4.0:compile
[DEBUG]       au.com.dius:pact-jvm-consumer_2.11:jar:2.5.0-beta.0:compile
[DEBUG]          au.com.dius:pact-jvm-model:jar:2.5.0-beta.0:compile
[DEBUG]             io.netty:netty-handler:jar:4.0.40.Final:compile
[DEBUG]                io.netty:netty-buffer:jar:4.0.40.Final:compile
[DEBUG]                   io.netty:netty-common:jar:4.0.40.Final:compile
[DEBUG]                io.netty:netty-transport:jar:4.0.40.Final:compile
[DEBUG]                io.netty:netty-codec:jar:4.0.40.Final:compile
[DEBUG]             com.github.zafarkhaja:java-semver:jar:0.9.0:compile
[DEBUG]             org.codehaus.groovy.modules.http-builder:http-builder:jar:0.7.1:compile
[DEBUG]                net.sf.json-lib:json-lib:jar:jdk15:2.3:compile
[DEBUG]                   commons-lang:commons-lang:jar:2.4:compile
[DEBUG]                   net.sf.ezmorph:ezmorph:jar:1.0.6:compile
[DEBUG]                net.sourceforge.nekohtml:nekohtml:jar:1.9.16:compile
[DEBUG]             com.amazonaws:aws-java-sdk-s3:jar:1.11.30:compile
[DEBUG]                com.amazonaws:aws-java-sdk-kms:jar:1.11.30:compile
[DEBUG]                com.amazonaws:aws-java-sdk-core:jar:1.11.30:compile
[DEBUG]                com.amazonaws:jmespath-java:jar:1.0:compile
[DEBUG]          au.com.dius:pact-jvm-matchers_2.11:jar:2.5.0-beta.0:compile
[DEBUG]             io.gatling:jsonpath_2.11:jar:0.6.4:compile
[DEBUG]          com.googlecode.java-diff-utils:diffutils:jar:1.3.0:compile
[DEBUG]          dk.brics.automaton:automaton:jar:1.11-8:compile
[DEBUG]          com.github.mifmif:generex:jar:1.0.1:compile
[DEBUG]          net.databinder:unfiltered-netty-server_2.11:jar:0.8.4:compile
[DEBUG]             net.databinder:unfiltered-netty_2.11:jar:0.8.4:compile
[DEBUG]                net.databinder:unfiltered_2.11:jar:0.8.4:compile
[DEBUG]                io.netty:netty-codec-http:jar:4.0.24.Final:compile
[DEBUG]             net.databinder:unfiltered-util_2.11:jar:0.8.4:compile
[DEBUG]          net.databinder.dispatch:dispatch-core_2.11:jar:0.11.3:compile
[DEBUG]             com.ning:async-http-client:jar:1.9.11:compile
[DEBUG]                io.netty:netty:jar:3.10.0.Final:compile
[DEBUG]    com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:jar:2.8.8:compile
[DEBUG]    org.codehaus.groovy:groovy-all:jar:2.4.11:compile
[DEBUG]    org.apache.cxf:cxf-rt-ws-security:jar:3.1.7:compile
[DEBUG]       org.apache.cxf:cxf-core:jar:3.1.7:compile
[DEBUG]          org.apache.ws.xmlschema:xmlschema-core:jar:2.2.1:compile
[DEBUG]       org.apache.cxf:cxf-rt-bindings-soap:jar:3.1.7:compile
[DEBUG]          org.apache.cxf:cxf-rt-wsdl:jar:3.1.7:compile
[DEBUG]             wsdl4j:wsdl4j:jar:1.6.3:compile
[DEBUG]          org.apache.cxf:cxf-rt-databinding-jaxb:jar:3.1.7:compile
[DEBUG]             com.sun.xml.bind:jaxb-impl:jar:2.2.11:compile
[DEBUG]             com.sun.xml.bind:jaxb-core:jar:2.2.11:compile
[DEBUG]       org.apache.cxf:cxf-rt-security-saml:jar:3.1.7:compile
[DEBUG]          org.apache.cxf:cxf-rt-security:jar:3.1.7:compile
[DEBUG]       org.apache.wss4j:wss4j-policy:jar:2.1.7:compile
[DEBUG]          org.apache.neethi:neethi:jar:3.0.3:compile
[DEBUG]       org.apache.wss4j:wss4j-ws-security-stax:jar:2.1.7:compile
[DEBUG]          org.apache.wss4j:wss4j-bindings:jar:2.1.7:compile
[DEBUG]       org.apache.wss4j:wss4j-ws-security-policy-stax:jar:2.1.7:compile
[DEBUG]    org.apache.wss4j:wss4j-ws-security-dom:jar:2.1.9:compile
[DEBUG]       org.apache.wss4j:wss4j-ws-security-common:jar:2.1.9:compile
[DEBUG]          org.opensaml:opensaml-saml-impl:jar:3.1.1:compile
[DEBUG]             org.opensaml:opensaml-profile-api:jar:3.1.1:compile
[DEBUG]                org.opensaml:opensaml-core:jar:3.1.1:compile
[DEBUG]             org.opensaml:opensaml-saml-api:jar:3.1.1:compile
[DEBUG]                org.opensaml:opensaml-xmlsec-api:jar:3.1.1:compile
[DEBUG]                org.opensaml:opensaml-soap-api:jar:3.1.1:compile
[DEBUG]             org.opensaml:opensaml-security-impl:jar:3.1.1:compile
[DEBUG]                org.opensaml:opensaml-security-api:jar:3.1.1:compile
[DEBUG]                   org.cryptacular:cryptacular:jar:1.0:compile
[DEBUG]             org.opensaml:opensaml-xmlsec-impl:jar:3.1.1:compile
[DEBUG]             net.shibboleth.utilities:java-support:jar:7.1.1:compile
[DEBUG]          org.opensaml:opensaml-xacml-impl:jar:3.1.1:compile
[DEBUG]             org.opensaml:opensaml-xacml-api:jar:3.1.1:compile
[DEBUG]          org.opensaml:opensaml-xacml-saml-impl:jar:3.1.1:compile
[DEBUG]             org.opensaml:opensaml-xacml-saml-api:jar:3.1.1:compile
[DEBUG]          org.jasypt:jasypt:jar:1.9.2:compile
[DEBUG]          org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile
[DEBUG]    org.apache.cxf:cxf-rt-frontend-jaxws:jar:3.1.7:compile
[DEBUG]       xml-resolver:xml-resolver:jar:1.2:compile
[DEBUG]       org.ow2.asm:asm:jar:5.0.4:compile
[DEBUG]       org.apache.cxf:cxf-rt-bindings-xml:jar:3.1.7:compile
[DEBUG]       org.apache.cxf:cxf-rt-frontend-simple:jar:3.1.7:compile
[DEBUG]       org.apache.cxf:cxf-rt-ws-addr:jar:3.1.7:compile
[DEBUG]          org.apache.cxf:cxf-rt-ws-policy:jar:3.1.7:compile
[DEBUG]    org.apache.cxf:cxf-rt-transports-http-jetty:jar:3.1.7:compile
[DEBUG]       org.apache.cxf:cxf-rt-transports-http:jar:3.1.7:compile
[DEBUG]       org.eclipse.jetty:jetty-util:jar:9.2.15.v20160210:compile
[DEBUG]       org.eclipse.jetty:jetty-io:jar:9.2.15.v20160210:compile
[DEBUG]       org.eclipse.jetty:jetty-security:jar:9.2.15.v20160210:compile
[DEBUG]       org.eclipse.jetty:jetty-continuation:jar:9.2.15.v20160210:compile
[DEBUG]       org.eclipse.jetty:jetty-http:jar:9.2.15.v20160210:compile
[DEBUG]    org.tmatesoft.svnkit:svnkit:jar:1.8.11:compile
[DEBUG]       com.jcraft:jsch.agentproxy.svnkit-trilead-ssh2:jar:0.0.7:compile
[DEBUG]          com.jcraft:jsch.agentproxy.core:jar:0.0.7:compile
[DEBUG]       com.trilead:trilead-ssh2:jar:1.0.0-build220:compile
[DEBUG]       net.java.dev.jna:jna-platform:jar:4.1.0:compile
[DEBUG]       net.java.dev.jna:jna:jar:4.1.0:compile
[DEBUG]       com.jcraft:jsch.agentproxy.connector-factory:jar:0.0.7:compile
[DEBUG]          com.jcraft:jsch.agentproxy.usocket-jna:jar:0.0.7:compile
[DEBUG]             net.java.dev.jna:platform:jar:3.4.0:compile
[DEBUG]          com.jcraft:jsch.agentproxy.usocket-nc:jar:0.0.7:compile
[DEBUG]          com.jcraft:jsch.agentproxy.sshagent:jar:0.0.7:compile
[DEBUG]          com.jcraft:jsch.agentproxy.pageant:jar:0.0.7:compile
[DEBUG]       de.regnis.q.sequence:sequence-library:jar:1.0.3:compile
[DEBUG]       org.tmatesoft.sqljet:sqljet:jar:1.1.10:compile
[DEBUG]          org.antlr:antlr-runtime:jar:3.4:compile
[INFO] 
[INFO] --- dependency-check-maven:2.0.1:check (default-cli) @ default ---
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG]   Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG]   Imported: org.eclipse.aether.impl < plexus.core
[DEBUG]   Imported: org.apache.maven.exception < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG]   Imported: org.eclipse.aether.version < plexus.core
[DEBUG]   Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG]   Imported: javax.enterprise.util.* < plexus.core
[DEBUG]   Imported: org.eclipse.aether.collection < plexus.core
[DEBUG]   Imported: org.apache.maven.monitor < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG]   Imported: org.apache.maven.profiles < plexus.core
[DEBUG]   Imported: org.apache.maven.classrealm < plexus.core
[DEBUG]   Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG]   Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG]   Imported: org.apache.maven.execution < plexus.core
[DEBUG]   Imported: org.apache.maven.reporting < plexus.core
[DEBUG]   Imported: org.apache.maven.usability < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.container < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.component < plexus.core
[DEBUG]   Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG]   Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG]   Imported: org.eclipse.aether.* < plexus.core
[DEBUG]   Imported: org.eclipse.aether.graph < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG]   Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.repository < plexus.core
[DEBUG]   Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG]   Imported: javax.inject.* < plexus.core
[DEBUG]   Imported: org.apache.maven.settings < plexus.core
[DEBUG]   Imported: org.codehaus.classworlds < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG]   Imported: org.apache.maven.toolchain < plexus.core
[DEBUG]   Imported: org.eclipse.aether.spi < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG]   Imported: org.apache.maven.configuration < plexus.core
[DEBUG]   Imported: org.apache.maven.cli < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.context < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG]   Imported: org.apache.maven.project < plexus.core
[DEBUG]   Imported: org.eclipse.aether.installation < plexus.core
[DEBUG]   Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG]   Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG]   Imported: org.apache.maven.artifact < plexus.core
[DEBUG]   Imported: org.apache.maven.model < plexus.core
[DEBUG]   Imported: org.slf4j.* < plexus.core
[DEBUG]   Imported: javax.enterprise.inject.* < plexus.core
[DEBUG]   Imported: org.apache.maven.* < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.* < plexus.core
[DEBUG]   Imported: org.apache.maven.plugin < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG] Populating class realm maven.api
[DEBUG] Dependency collection stats: {ConflictMarker.analyzeTime=0, ConflictMarker.markTime=0, ConflictMarker.nodeCount=103, ConflictIdSorter.graphTime=0, ConflictIdSorter.topsortTime=1, ConflictIdSorter.conflictIdCount=52, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=1, ConflictResolver.conflictItemCount=100, DefaultDependencyCollector.collectTime=362, DefaultDependencyCollector.transformTime=2}
[DEBUG] org.owasp:dependency-check-maven:jar:2.0.1:
[DEBUG]    org.owasp:dependency-check-core:jar:2.0.1:compile
[DEBUG]       joda-time:joda-time:jar:1.6:compile
[DEBUG]       org.slf4j:slf4j-api:jar:1.7.24:compile
[DEBUG]       org.apache.commons:commons-compress:jar:1.14:compile
[DEBUG]       commons-io:commons-io:jar:2.5:compile
[DEBUG]       org.apache.commons:commons-lang3:jar:3.4:compile
[DEBUG]       org.apache.lucene:lucene-core:jar:4.7.2:compile
[DEBUG]       org.apache.lucene:lucene-analyzers-common:jar:4.7.2:compile
[DEBUG]       org.apache.lucene:lucene-queryparser:jar:4.7.2:compile
[DEBUG]          org.apache.lucene:lucene-queries:jar:4.7.2:compile
[DEBUG]          org.apache.lucene:lucene-sandbox:jar:4.7.2:compile
[DEBUG]       org.apache.velocity:velocity:jar:1.7:compile
[DEBUG]          commons-collections:commons-collections:jar:3.2.2:compile
[DEBUG]          commons-lang:commons-lang:jar:2.4:compile
[DEBUG]       com.h2database:h2:jar:1.3.176:runtime
[DEBUG]       org.glassfish:javax.json:jar:1.0.4:compile
[DEBUG]       org.jsoup:jsoup:jar:1.10.2:compile
[DEBUG]       com.sun.mail:mailapi:jar:1.5.6:compile
[DEBUG]       com.google.code.gson:gson:jar:2.4:compile
[DEBUG]    org.owasp:dependency-check-utils:jar:2.0.1:compile
[DEBUG]    org.apache.maven.reporting:maven-reporting-api:jar:3.0:compile
[DEBUG]       org.apache.maven.doxia:doxia-sink-api:jar:1.0:compile
[DEBUG]    org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG]       org.codehaus.plexus:plexus-utils:jar:1.5.5:compile
[DEBUG]       org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]    org.apache.maven.shared:maven-dependency-tree:jar:2.2:compile
[DEBUG]       org.codehaus.plexus:plexus-component-annotations:jar:1.5.5:compile
[DEBUG]       org.eclipse.aether:aether-util:jar:0.9.0.M2:compile
[DEBUG]    org.apache.maven.shared:maven-artifact-transfer:jar:0.9.0:compile
[DEBUG]       org.apache.maven:maven-core:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-model:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-settings:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-settings-builder:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-repository-metadata:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-plugin-api:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-model-builder:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-aether-provider:jar:3.0:runtime
[DEBUG]          org.sonatype.aether:aether-impl:jar:1.7:compile
[DEBUG]             org.sonatype.aether:aether-spi:jar:1.7:compile
[DEBUG]          org.sonatype.aether:aether-api:jar:1.7:compile
[DEBUG]          org.sonatype.aether:aether-util:jar:1.7:compile
[DEBUG]          org.sonatype.sisu:sisu-inject-plexus:jar:1.4.2:compile
[DEBUG]             org.sonatype.sisu:sisu-inject-bean:jar:1.4.2:compile
[DEBUG]                org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7:compile
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.14:compile
[DEBUG]          org.codehaus.plexus:plexus-classworlds:jar:2.2.3:compile
[DEBUG]       org.apache.maven:maven-artifact:jar:3.0:compile
[DEBUG]       org.apache.maven.shared:maven-common-artifact-filters:jar:3.0.0:compile
[DEBUG]          org.apache.maven.shared:maven-shared-utils:jar:3.0.0:compile
[DEBUG]             com.google.code.findbugs:jsr305:jar:2.0.1:compile
[DEBUG]       commons-codec:commons-codec:jar:1.6:compile
[DEBUG] Created new class realm plugin>org.owasp:dependency-check-maven:2.0.1
[DEBUG] Importing foreign packages into class realm plugin>org.owasp:dependency-check-maven:2.0.1
[DEBUG]   Imported:  < maven.api
[DEBUG] Populating class realm plugin>org.owasp:dependency-check-maven:2.0.1
[DEBUG]   Included: org.owasp:dependency-check-maven:jar:2.0.1
[DEBUG]   Included: org.owasp:dependency-check-core:jar:2.0.1
[DEBUG]   Included: joda-time:joda-time:jar:1.6
[DEBUG]   Included: org.slf4j:slf4j-api:jar:1.7.24
[DEBUG]   Included: org.apache.commons:commons-compress:jar:1.14
[DEBUG]   Included: commons-io:commons-io:jar:2.5
[DEBUG]   Included: org.apache.commons:commons-lang3:jar:3.4
[DEBUG]   Included: org.apache.lucene:lucene-core:jar:4.7.2
[DEBUG]   Included: org.apache.lucene:lucene-analyzers-common:jar:4.7.2
[DEBUG]   Included: org.apache.lucene:lucene-queryparser:jar:4.7.2
[DEBUG]   Included: org.apache.lucene:lucene-queries:jar:4.7.2
[DEBUG]   Included: org.apache.lucene:lucene-sandbox:jar:4.7.2
[DEBUG]   Included: org.apache.velocity:velocity:jar:1.7
[DEBUG]   Included: commons-collections:commons-collections:jar:3.2.2
[DEBUG]   Included: commons-lang:commons-lang:jar:2.4
[DEBUG]   Included: com.h2database:h2:jar:1.3.176
[DEBUG]   Included: org.glassfish:javax.json:jar:1.0.4
[DEBUG]   Included: org.jsoup:jsoup:jar:1.10.2
[DEBUG]   Included: com.sun.mail:mailapi:jar:1.5.6
[DEBUG]   Included: com.google.code.gson:gson:jar:2.4
[DEBUG]   Included: org.owasp:dependency-check-utils:jar:2.0.1
[DEBUG]   Included: org.apache.maven.reporting:maven-reporting-api:jar:3.0
[DEBUG]   Included: org.apache.maven.doxia:doxia-sink-api:jar:1.0
[DEBUG]   Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG]   Included: org.codehaus.plexus:plexus-utils:jar:1.5.5
[DEBUG]   Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG]   Included: org.apache.maven.shared:maven-dependency-tree:jar:2.2
[DEBUG]   Included: org.codehaus.plexus:plexus-component-annotations:jar:1.5.5
[DEBUG]   Included: org.eclipse.aether:aether-util:jar:0.9.0.M2
[DEBUG]   Included: org.apache.maven.shared:maven-artifact-transfer:jar:0.9.0
[DEBUG]   Included: org.sonatype.aether:aether-util:jar:1.7
[DEBUG]   Included: org.sonatype.sisu:sisu-inject-bean:jar:1.4.2
[DEBUG]   Included: org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7
[DEBUG]   Included: org.codehaus.plexus:plexus-interpolation:jar:1.14
[DEBUG]   Included: org.apache.maven.shared:maven-common-artifact-filters:jar:3.0.0
[DEBUG]   Included: org.apache.maven.shared:maven-shared-utils:jar:3.0.0
[DEBUG]   Included: com.google.code.findbugs:jsr305:jar:2.0.1
[DEBUG]   Included: commons-codec:commons-codec:jar:1.6
[DEBUG]   Excluded: org.apache.maven:maven-core:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-model:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-settings:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-settings-builder:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-repository-metadata:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-plugin-api:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-model-builder:jar:3.0
[DEBUG]   Excluded: org.apache.maven:maven-aether-provider:jar:3.0
[DEBUG]   Excluded: org.sonatype.aether:aether-impl:jar:1.7
[DEBUG]   Excluded: org.sonatype.aether:aether-spi:jar:1.7
[DEBUG]   Excluded: org.sonatype.aether:aether-api:jar:1.7
[DEBUG]   Excluded: org.sonatype.sisu:sisu-inject-plexus:jar:1.4.2
[DEBUG]   Excluded: org.codehaus.plexus:plexus-classworlds:jar:2.2.3
[DEBUG]   Excluded: org.apache.maven:maven-artifact:jar:3.0
[DEBUG] Configuring mojo org.owasp:dependency-check-maven:2.0.1:check from plugin realm ClassRealm[plugin>org.owasp:dependency-check-maven:2.0.1, parent: sun.misc.Launcher$AppClassLoader@f1c787]
[DEBUG] Configuring mojo 'org.owasp:dependency-check-maven:2.0.1:check' with basic configurator -->
[DEBUG]   (f) assemblyAnalyzerEnabled = false
[DEBUG]   (f) autoUpdate = false
[DEBUG]   (f) connectionString = jdbc:h2:file:%s;FILE_LOCK=FS;AUTOCOMMIT=ON;
[DEBUG]   (f) dataDirectory = /home/web/dependency-check/1.4.3/cve-data
[DEBUG]   (f) dataFileName = dependency-check.ser
[DEBUG]   (f) failBuildOnAnyVulnerability = false
[DEBUG]   (f) failBuildOnCVSS = 8.0
[DEBUG]   (f) failOnError = true
[DEBUG]   (f) format = HTML
[DEBUG]   (f) mavenSettings = org.apache.maven.execution.SettingsAdapter@6e76b4
[DEBUG]   (f) name = dependency-check
[DEBUG]   (f) nuspecAnalyzerEnabled = false
[DEBUG]   (f) outputDirectory = target/reports/owasp
[DEBUG]   (f) project = MavenProject: [omitted]
[DEBUG]   (f) reactorProjects = [omitted]
[DEBUG]   (f) remoteRepositories = [      id: spring.io
      url: http://repo.spring.io/libs-release-remote
   layout: default
snapshots: [enabled => true, update => daily]
 releases: [enabled => true, update => daily]
,       id: [ omitted ]
      url: [ omitted ]
   layout: default
snapshots: [enabled => true, update => daily]
 releases: [enabled => true, update => daily]
,       id: central
      url: https://repo.maven.apache.org/maven2
   layout: default
snapshots: [enabled => false, update => daily]
 releases: [enabled => true, update => daily]
]
[DEBUG]   (s) reportOutputDirectory = target/site
[DEBUG]   (f) session = org.apache.maven.execution.MavenSession@1533f7a
[DEBUG]   (f) settingsXml = org.apache.maven.execution.SettingsAdapter@6e76b4
[DEBUG]   (f) showSummary = true
[DEBUG]   (f) skip = false
[DEBUG]   (f) skipProvidedScope = true
[DEBUG]   (f) skipRuntimeScope = false
[DEBUG]   (f) skipSystemScope = false
[DEBUG]   (f) skipTestScope = true
[DEBUG] -- end configuration --
[DEBUG] Properties loaded:

data.driver_path=''
cve.url-2.0.modified='https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz'
cve.check.validforhours='4'
cve.startyear='2002'
data.version='3.0'
analyzer.hint.enabled='true'
analyzer.cocoapods.enabled='true'
cve.url-2.0.original='https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz'
analyzer.nvdcve.enabled='true'
cve.url-1.2.base='https://nvd.nist.gov/download/nvdcve-%d.xml.gz'
analyzer.falsepositive.enabled='true'
cve.url-2.0.base='https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-%d.xml.gz'
application.version='2.0.1'
data.connection_string='jdbc:h2:file:%s;FILE_LOCK=SERIALIZED;AUTOCOMMIT=ON;'
analyzer.archive.enabled='true'
analyzer.ruby.gemspec.enabled='true'
analyzer.assembly.enabled='true'
analyzer.jar.enabled='true'
analyzer.python.distribution.enabled='true'
analyzer.cmake.enabled='true'
analyzer.node.package.enabled='true'
data.password='*****'
cpe.url='https://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml.gz'
downloader.quick.query.timestamp='true'
application.name='Dependency-Check Core'
analyzer.cpesuppression.enabled='true'
engine.version.url='https://jeremylong.github.io/DependencyCheck/current.txt'
analyzer.central.url='https://search.maven.org/solrsearch/select'
data.user='dcuser'
analyzer.nsp.url='https://api.nodesecurity.io/check'
data.driver_name='org.h2.Driver'
updater.nvdcve.enabled='true'
analyzer.dependencybundling.enabled='true'
analyzer.swift.package.manager.enabled='true'
analyzer.versionfilter.enabled='true'
cve.cpe.startswith.filter='cpe:/a:'
analyzer.vulnerabilitysuppression.enabled='true'
updater.versioncheck.enabled='true'
analyzer.filename.enabled='true'
data.file_name='dc.h2.db'
analyzer.experimental.enabled='false'
analyzer.nexus.proxy='true'
archive.scan.depth='3'
analyzer.openssl.enabled='true'
data.directory='[JAR]/data'
analyzer.central.enabled='true'
analyzer.composer.lock.enabled='true'
cve.url.modified.validfordays='7'
analyzer.nuspec.enabled='true'
analyzer.nexus.enabled='false'
analyzer.cpe.enabled='true'
proxy.disableSchemas='true'
cve.url-1.2.modified='https://nvd.nist.gov/download/nvdcve-Modified.xml.gz'
analyzer.nsp.package.enabled='true'
analyzer.autoconf.enabled='true'
downloader.tls.protocols='TLSv1,TLSv1.1,TLSv1.2,TLSv1.3'
analyzer.dependencymerging.enabled='true'
cpe.validfordays='30'
analyzer.nexus.url='https://repository.sonatype.org/service/local/'
autoupdate='true'
analyzer.python.package.enabled='true'

[DEBUG] Properties updated via merge:

data.driver_path=''
cve.url-2.0.modified='https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz'
cve.check.validforhours='4'
cve.startyear='2002'
data.version='3.0'
analyzer.hint.enabled='true'
analyzer.cocoapods.enabled='true'
cve.url-2.0.original='https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz'
analyzer.nvdcve.enabled='true'
cve.url-1.2.base='https://nvd.nist.gov/download/nvdcve-%d.xml.gz'
analyzer.falsepositive.enabled='true'
cve.url-2.0.base='https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-%d.xml.gz'
application.version='2.0.1'
data.connection_string='jdbc:h2:file:%s;FILE_LOCK=SERIALIZED;AUTOCOMMIT=ON;'
analyzer.archive.enabled='true'
analyzer.ruby.gemspec.enabled='true'
analyzer.assembly.enabled='true'
analyzer.jar.enabled='true'
analyzer.python.distribution.enabled='true'
analyzer.cmake.enabled='true'
analyzer.node.package.enabled='true'
data.password='*****'
cpe.url='https://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml.gz'
downloader.quick.query.timestamp='true'
application.name='Dependency-Check Core'
analyzer.cpesuppression.enabled='true'
engine.version.url='https://jeremylong.github.io/DependencyCheck/current.txt'
analyzer.central.url='https://search.maven.org/solrsearch/select'
data.user='dcuser'
analyzer.nsp.url='https://api.nodesecurity.io/check'
data.driver_name='org.h2.Driver'
updater.nvdcve.enabled='true'
analyzer.dependencybundling.enabled='true'
analyzer.swift.package.manager.enabled='true'
analyzer.versionfilter.enabled='true'
cve.cpe.startswith.filter='cpe:/a:'
analyzer.vulnerabilitysuppression.enabled='true'
updater.versioncheck.enabled='true'
analyzer.filename.enabled='true'
data.file_name='dc.h2.db'
analyzer.experimental.enabled='false'
analyzer.nexus.proxy='true'
archive.scan.depth='3'
analyzer.openssl.enabled='true'
data.directory='[JAR]/../../dependency-check-data/3.0'
analyzer.central.enabled='true'
analyzer.composer.lock.enabled='true'
cve.url.modified.validfordays='7'
analyzer.nuspec.enabled='true'
analyzer.nexus.enabled='false'
analyzer.cpe.enabled='true'
proxy.disableSchemas='true'
cve.url-1.2.modified='https://nvd.nist.gov/download/nvdcve-Modified.xml.gz'
analyzer.nsp.package.enabled='true'
analyzer.autoconf.enabled='true'
downloader.tls.protocols='TLSv1,TLSv1.1,TLSv1.2,TLSv1.3'
analyzer.dependencymerging.enabled='true'
cpe.validfordays='30'
analyzer.nexus.url='https://repository.sonatype.org/service/local/'
autoupdate='true'
analyzer.python.package.enabled='true'

[DEBUG] Setting: autoupdate='false'
[DEBUG] Setting: analyzer.nuspec.enabled='false'
[DEBUG] Setting: analyzer.assembly.enabled='false'
[DEBUG] Setting: data.connection_string='jdbc:h2:file:%s;FILE_LOCK=FS;AUTOCOMMIT=ON;'
[DEBUG] Setting: data.directory='/home/web/dependency-check/1.4.3/cve-data'
[DEBUG] Loading driver: org.h2.Driver
[DEBUG] Settings.getDataFile() - file: '/home/web/dependency-check/1.4.3/cve-data'
[DEBUG] Connection String: 'jdbc:h2:file:/home/web/dependency-check/1.4.3/cve-data/dc;FILE_LOCK=FS;AUTOCOMMIT=ON;'
[DEBUG] Settings.getDataFile() - file: '/home/web/dependency-check/1.4.3/cve-data'
[DEBUG] Need to create DB Structure: false
[DEBUG] Loading database connection
[DEBUG] Connection String: jdbc:h2:file:/home/web/dependency-check/1.4.3/cve-data/dc;FILE_LOCK=FS;AUTOCOMMIT=ON;
[DEBUG] Database User: dcuser
[DEBUG] Unable to connect to the database
org.h2.jdbc.JdbcSQLException: File corrupted while reading record: "146930 of 145738". Possible solution: use the recovery tool [90030-176]
    at org.h2.message.DbException.getJdbcSQLException(DbException.java:344)
    at org.h2.message.DbException.get(DbException.java:178)
    at org.h2.message.DbException.get(DbException.java:154)
    at org.h2.store.PageStore.readPage(PageStore.java:1322)
    at org.h2.store.PageStore.getPage(PageStore.java:750)
    at org.h2.index.PageDataIndex.getPage(PageDataIndex.java:234)
    at org.h2.index.PageDataNode.getLastKey(PageDataNode.java:215)
    at org.h2.index.PageDataNode.getLastKey(PageDataNode.java:215)
    at org.h2.index.PageDataIndex.<init>(PageDataIndex.java:88)
    at org.h2.table.RegularTable.<init>(RegularTable.java:84)
    at org.h2.store.PageStore.addMeta(PageStore.java:1693)
    at org.h2.store.PageStore.readMetaData(PageStore.java:1624)
    at org.h2.store.PageStore.recover(PageStore.java:1406)
    at org.h2.store.PageStore.openExisting(PageStore.java:368)
    at org.h2.store.PageStore.open(PageStore.java:289)
    at org.h2.engine.Database.getPageStore(Database.java:2366)
    at org.h2.engine.Database.open(Database.java:657)
    at org.h2.engine.Database.openDatabase(Database.java:260)
    at org.h2.engine.Database.<init>(Database.java:254)
    at org.h2.engine.Engine.openSession(Engine.java:57)
    at org.h2.engine.Engine.openSession(Engine.java:164)
    at org.h2.engine.Engine.createSessionAndValidate(Engine.java:142)
    at org.h2.engine.Engine.createSession(Engine.java:125)
    at org.h2.engine.Engine.createSession(Engine.java:27)
    at org.h2.engine.SessionRemote.connectEmbeddedOrServer(SessionRemote.java:331)
    at org.h2.jdbc.JdbcConnection.<init>(JdbcConnection.java:107)
    at org.h2.jdbc.JdbcConnection.<init>(JdbcConnection.java:91)
    at org.h2.Driver.connect(Driver.java:74)
    at java.sql.DriverManager.getConnection(DriverManager.java:571)
    at java.sql.DriverManager.getConnection(DriverManager.java:215)
    at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.initialize(ConnectionFactory.java:150)
    at org.owasp.dependencycheck.Engine.initializeEngine(Engine.java:129)
    at org.owasp.dependencycheck.Engine.<init>(Engine.java:106)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.initializeEngine(BaseDependencyCheckMojo.java:881)
    at org.owasp.dependencycheck.maven.CheckMojo.runCheck(CheckMojo.java:88)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute(BaseDependencyCheckMojo.java:514)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:132)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:116)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:188)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:184)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:745)
[DEBUG] Database connection error
org.owasp.dependencycheck.data.nvdcve.DatabaseException: Unable to connect to the database
    at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.initialize(ConnectionFactory.java:164)
    at org.owasp.dependencycheck.Engine.initializeEngine(Engine.java:129)
    at org.owasp.dependencycheck.Engine.<init>(Engine.java:106)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.initializeEngine(BaseDependencyCheckMojo.java:881)
    at org.owasp.dependencycheck.maven.CheckMojo.runCheck(CheckMojo.java:88)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute(BaseDependencyCheckMojo.java:514)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:132)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:208)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:116)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:188)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:184)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:745)
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 4.783 s (Wall Clock)
[INFO] Finished at: 2017-08-01T20:36:02+00:00
[INFO] Final Memory: 30M/317M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:2.0.1:check (default-cli) on project default: An exception occurred connecting to the local database. Please see the log file for more details. Unable to connect to the database -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.owasp:dependency-check-maven:2.0.1:check (default-cli) on project default: An exception occurred connecting to the local database. Please see the log file for more details.
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:216)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:116)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:188)
    at org.apache.maven.lifecycle.internal.builder.multithreaded.MultiThreadedBuilder$1.call(MultiThreadedBuilder.java:184)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask.run(FutureTask.java:262)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.maven.plugin.MojoExecutionException: An exception occurred connecting to the local database. Please see the log file for more details.
    at org.owasp.dependencycheck.maven.CheckMojo.runCheck(CheckMojo.java:95)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute(BaseDependencyCheckMojo.java:514)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:132)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:208)
    ... 11 more
Caused by: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Unable to connect to the database
    at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.initialize(ConnectionFactory.java:164)
    at org.owasp.dependencycheck.Engine.initializeEngine(Engine.java:129)
    at org.owasp.dependencycheck.Engine.<init>(Engine.java:106)
    at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.initializeEngine(BaseDependencyCheckMojo.java:881)
    at org.owasp.dependencycheck.maven.CheckMojo.runCheck(CheckMojo.java:88)
    ... 14 more
[ERROR] 
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
FlyingTopHat commented 7 years ago

I have just started to see the same exception with a Jenkins CI setup. The error is identical but on the aggregate goal.

org.owasp:dependency-check-maven:1.4.4.1:aggregate (default cli) on project xx: An exception occurred connecting to the local database. Please see the log file for more details. Unable to connect to the database -> [Help 1]

Unfortunately I'm unable to provide debug information, but thought it might be useful to know that someone else is experiencing the problem.

jeremylong commented 7 years ago

@FlyingTopHat are you also seeing:

Unable to connect to the database
org.h2.jdbc.JdbcSQLException: File corrupted while reading record: "146930 of 145738". Possible solution: use the recovery tool [90030-176]
    at org.h2.message.DbException.getJdbcSQLException(DbException.java:344)
jeremylong commented 7 years ago

@giovaneliberato if you delete the contents of /home/web/dependency-check/1.4.3/cve-data/dc and re-run the build - do you still get the error?

lock[bot] commented 6 years ago

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.