search

jfrog / frogbot

🐸 Scans your Git repository with JFrog Xray for security vulnerabilities. 🤖
https://docs.jfrog-applications.jfrog.io/
Apache License 2.0
301 stars 69 forks source link

Version 2.8.0-RC1 is not available for artifact commons-io:commons-io #695

Open sulakhesagar opened 4 months ago

sulakhesagar commented 4 months ago

Describe the bug

Could you please help us to resolve below error:
When executing FrogBot on Auto Scanning PR and Push For Fix in Azure Pipeline, the following error occurs:

[ERROR] Failed to execute goal org.codehaus.mojo:versions-maven-plugin:2.16.2:use-dep-version (default-cli) on project XXX: Version 2.8.0-RC1 is not available for artifact commons-io:commons-io Below are the versions we are using to Artifactory 7.77.11 Xray 3.91.3

Current behavior

image

Reproduction steps

No response

Expected behavior

No response

JFrog Frogbot version

Artifactory 7.77.11 Xray 3.91.3

Package manager info

pom.xml

Git provider

Azure DevOps

JFrog Frogbot configuration yaml file

No response

Operating system type and version

Windows

JFrog Xray version

No response

eranturgeman commented 4 months ago

Hello @sulakhesagar and thank you for using Frogbot! Can you please provide the following details:

1) Are you working in an air-gapped mode (do you have access to the internet)? 2) Do you have a resolution repository set in your CI execution? meaning do you resolve your dependency from an Artifactory repo or directly from the a central registry? 3) What package manager and programming language do you use? 4) What is the current version of the problematic package you are using?