pentaho / mondrian

Mondrian is an Online Analytical Processing (OLAP) server that enables business users to analyze large quantities of data in real-time.
http://mondrian.pentaho.com/
Other
1.14k stars 724 forks source link

DO NOT MERGE -- testing #1417

Open sujitscaria opened 1 month ago

sujitscaria commented 1 month ago

DO NOT MERGE -- testing threatrix tool

buildguy commented 1 month ago

:white_check_mark: Build finished in 34m 26s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 33m 59s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 31m 54s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 33m 7s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 32m 3s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 31m 41s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 32m 43s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:x: Build failed in 10m 29s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:exclamation: No tests found!

:information_source: This is an automatic message

buildguy commented 1 month ago

:x: Build failed in 29m 12s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 32m 23s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

lucboudreau commented 1 month ago

Threatrix logo

mondrian project's entity: Team PoC Dashboard

Vulnerabilities

Severity Count
Medium 2

Licenses

Category Count
Copyleft Weak 11

Asset Composition

Type Count
Embedded 13
Open Source 1086
Unique 108

Policy Violations

Policy Name Artifact name Note
Reject Copyleft Strong on PRs pkg:maven/org.springframework/spring-core@5.3.34
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.checkerframework/checker-qual@3.5.0
Reject Copyleft Strong on PRs pkg:maven/commons-codec/commons-codec@1.15
Reject Copyleft Strong on PRs pkg:maven/commons-net/commons-net@3.9.0
Reject Copyleft Strong on PRs mondrian/src/generated/java/mondrian/xmla/DataSourcesConfig.java
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/failureaccess@1.0.1
Reject Copyleft Strong on PRs pkg:maven/org.olap4j/olap4j@1.2.0
Reject Copyleft Strong on PRs pkg:maven/org.apache.httpcomponents/httpcore@4.4.11
Reject Copyleft Strong on PRs pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.91
Reject Copyleft Strong on PRs pkg:maven/org.apache.tomcat/tomcat-juli@9.0.91
Reject Copyleft Strong on PRs pkg:maven/net.sf.scannotation/scannotation@1.0.2
Reject Copyleft Strong on PRs pkg:maven/commons-math/commons-math@1.1
Reject Copyleft Strong on PRs pkg:maven/commons-collections/commons-collections@3.2.2
Reject Copyleft Strong on PRs pkg:maven/xml-apis/xml-apis-ext@1.3.04
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-vfs2@2.8.0
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-pool2@2.11.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-lang3@3.12.0
Reject Copyleft Strong on PRs pkg:maven/ognl/ognl@2.6.9
Reject Copyleft Strong on PRs pkg:maven/com.github.mwiede/jsch@0.2.9
Reject Copyleft Strong on PRs pkg:maven/org.dom4j/dom4j@2.1.4
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-jcl@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.owasp.encoder/encoder@1.2
Reject Copyleft Strong on PRs pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0
Reject Copyleft Strong on PRs pkg:maven/org.slf4j/slf4j-api@1.7.12
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-dbcp2@2.9.0
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/guava@32.1.2-jre
Reject Copyleft Strong on PRs pkg:maven/com.google.code.findbugs/jsr305@3.0.2
Reject Copyleft Strong on PRs pkg:maven/commons-io/commons-io@2.16.1
Reject Copyleft Strong on PRs pkg:maven/com.wcohen/com.wcohen.secondstring@0.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.httpcomponents/httpclient@4.5.14
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.checkerframework/checker-qual@3.33.0
Reject Copyleft Strong on PRs pkg:maven/com.google.j2objc/j2objc-annotations@2.8
Reject Copyleft Strong on PRs pkg:maven/commons-logging/commons-logging@1.2
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1
Reject Copyleft Strong on PRs pkg:maven/xerces/xercesImpl@2.12.2
Reject Copyleft Strong on PRs pkg:maven/net.java.dev.javacc/javacc@5.0
Reject Copyleft Strong on PRs pkg:maven/commons-beanutils/commons-beanutils@1.9.4
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava
Reject Copyleft Strong on PRs pkg:maven/joda-time/joda-time@2.10.2
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-compress@1.26.2
Reject Copyleft Strong on PRs pkg:maven/org.springframework/spring-expression@5.3.34
Reject Copyleft Strong on PRs pkg:maven/commons-lang/commons-lang@2.4
Reject Copyleft Strong on PRs pkg:maven/javax.validation/validation-api@1.0.0.GA
Reject Copyleft Strong on PRs pkg:maven/org.codehaus.groovy/groovy-all@2.4.21
lucboudreau commented 1 month ago

Threatrix logo

mondrian project's entity: Team PoC Dashboard

Vulnerabilities

Severity Count
Medium 4

Licenses

Category Count
Copyleft Weak 22

Asset Composition

Type Count
Embedded 13
Open Source 1086
Unique 108

Policy Violations

Policy Name Artifact name Note
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1
Reject Copyleft Strong on PRs pkg:maven/commons-io/commons-io@2.16.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
lucboudreau commented 1 month ago

Threatrix logo

mondrian project's entity: Team PoC Dashboard

Vulnerabilities

Severity Count
Medium 4

Licenses

Category Count
Copyleft Weak 22

Asset Composition

Type Count
Embedded 13
Open Source 1086
Unique 108

Policy Violations

Policy Name Artifact name Note
Reject Copyleft Strong on PRs pkg:maven/org.springframework/spring-core@5.3.34
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.checkerframework/checker-qual@3.5.0
Reject Copyleft Strong on PRs pkg:maven/commons-codec/commons-codec@1.15
Reject Copyleft Strong on PRs pkg:maven/commons-net/commons-net@3.9.0
Reject Copyleft Strong on PRs mondrian/src/generated/java/mondrian/xmla/DataSourcesConfig.java
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/failureaccess@1.0.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.httpcomponents/httpcore@4.4.11
Reject Copyleft Strong on PRs pkg:maven/org.olap4j/olap4j@1.2.0
Reject Copyleft Strong on PRs pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.91
Reject Copyleft Strong on PRs pkg:maven/org.apache.tomcat/tomcat-juli@9.0.91
Reject Copyleft Strong on PRs pkg:maven/net.sf.scannotation/scannotation@1.0.2
Reject Copyleft Strong on PRs pkg:maven/commons-math/commons-math@1.1
Reject Copyleft Strong on PRs pkg:maven/commons-collections/commons-collections@3.2.2
Reject Copyleft Strong on PRs pkg:maven/xml-apis/xml-apis-ext@1.3.04
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-vfs2@2.8.0
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-pool2@2.11.1
Reject Copyleft Strong on PRs pkg:maven/ognl/ognl@2.6.9
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-lang3@3.12.0
Reject Copyleft Strong on PRs pkg:maven/com.github.mwiede/jsch@0.2.9
Reject Copyleft Strong on PRs pkg:maven/org.dom4j/dom4j@2.1.4
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-jcl@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.owasp.encoder/encoder@1.2
Reject Copyleft Strong on PRs pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0
Reject Copyleft Strong on PRs pkg:maven/org.slf4j/slf4j-api@1.7.12
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-dbcp2@2.9.0
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/guava@32.1.2-jre
Reject Copyleft Strong on PRs pkg:maven/commons-io/commons-io@2.16.1
Reject Copyleft Strong on PRs pkg:maven/com.google.code.findbugs/jsr305@3.0.2
Reject Copyleft Strong on PRs pkg:maven/com.wcohen/com.wcohen.secondstring@0.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.httpcomponents/httpclient@4.5.14
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.checkerframework/checker-qual@3.33.0
Reject Copyleft Strong on PRs pkg:maven/com.google.j2objc/j2objc-annotations@2.8
Reject Copyleft Strong on PRs pkg:maven/commons-logging/commons-logging@1.2
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1
Reject Copyleft Strong on PRs pkg:maven/xerces/xercesImpl@2.12.2
Reject Copyleft Strong on PRs pkg:maven/commons-beanutils/commons-beanutils@1.9.4
Reject Copyleft Strong on PRs pkg:maven/net.java.dev.javacc/javacc@5.0
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava
Reject Copyleft Strong on PRs pkg:maven/joda-time/joda-time@2.10.2
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-compress@1.26.2
Reject Copyleft Strong on PRs pkg:maven/org.springframework/spring-expression@5.3.34
Reject Copyleft Strong on PRs pkg:maven/commons-lang/commons-lang@2.4
Reject Copyleft Strong on PRs pkg:maven/org.codehaus.groovy/groovy-all@2.4.21
Reject Copyleft Strong on PRs pkg:maven/javax.validation/validation-api@1.0.0.GA
buildguy commented 1 month ago

:x: Build failed in 1m 41s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:exclamation: No tests found!

:information_source: This is an automatic message

buildguy commented 1 month ago

Threatrix logo

mondrian project's entity: Team PoC Dashboard

Vulnerabilities

Severity Count
Medium 4

Licenses

Category Count
Copyleft Weak 22

Asset Composition

Type Count
Embedded 12
Open Source 1086
Unique 112

Policy Violations

Policy Name Artifact name Note
Reject Copyleft Strong on PRs pkg:maven/org.springframework/spring-core@5.3.34
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.checkerframework/checker-qual@3.5.0
Reject Copyleft Strong on PRs pkg:maven/commons-codec/commons-codec@1.15
Reject Copyleft Strong on PRs pkg:maven/commons-net/commons-net@3.9.0
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/failureaccess@1.0.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.httpcomponents/httpcore@4.4.11
Reject Copyleft Strong on PRs pkg:maven/org.olap4j/olap4j@1.2.0
Reject Copyleft Strong on PRs pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.91
Reject Copyleft Strong on PRs pkg:maven/org.apache.tomcat/tomcat-juli@9.0.91
Reject Copyleft Strong on PRs pkg:maven/net.sf.scannotation/scannotation@1.0.2
Reject Copyleft Strong on PRs pkg:maven/commons-math/commons-math@1.1
Reject Copyleft Strong on PRs mondrian/src/generated/java/mondrian/parser/SimpleCharStream.java
Reject Copyleft Strong on PRs pkg:maven/commons-collections/commons-collections@3.2.2
Reject Copyleft Strong on PRs pkg:maven/xml-apis/xml-apis-ext@1.3.04
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-vfs2@2.8.0
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-pool2@2.11.1
Reject Copyleft Strong on PRs pkg:maven/ognl/ognl@2.6.9
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-lang3@3.12.0
Reject Copyleft Strong on PRs pkg:maven/com.github.mwiede/jsch@0.2.9
Reject Copyleft Strong on PRs pkg:maven/org.dom4j/dom4j@2.1.4
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-jcl@2.17.1
Reject Copyleft Strong on PRs pkg:maven/org.owasp.encoder/encoder@1.2
Reject Copyleft Strong on PRs pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0
Reject Copyleft Strong on PRs pkg:maven/org.slf4j/slf4j-api@1.7.12
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-dbcp2@2.9.0
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/guava@32.1.2-jre
Reject Copyleft Strong on PRs pkg:maven/com.google.code.findbugs/jsr305@3.0.2
Reject Copyleft Strong on PRs pkg:maven/com.wcohen/com.wcohen.secondstring@0.1
Reject Copyleft Strong on PRs pkg:maven/commons-io/commons-io@2.16.1
Reject Copyleft Strong on PRs pkg:maven/org.apache.httpcomponents/httpclient@4.5.14
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
Reject Copyleft Strong on PRs pkg:maven/com.google.j2objc/j2objc-annotations@2.8
Reject Copyleft Strong on PRs pkg:maven/commons-logging/commons-logging@1.2
Reject Copyleft Strong on PRs pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1
Reject Copyleft Strong on PRs pkg:maven/xerces/xercesImpl@2.12.2
Reject Copyleft Strong on PRs pkg:maven/commons-beanutils/commons-beanutils@1.9.4
Reject Copyleft Strong on PRs pkg:maven/net.java.dev.javacc/javacc@5.0
Reject Copyleft Strong on PRs pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava
Reject Copyleft Strong on PRs pkg:maven/joda-time/joda-time@2.10.2
Reject Copyleft Strong on PRs pkg:maven/org.apache.commons/commons-compress@1.26.2
Reject Copyleft Strong on PRs pkg:maven/org.springframework/spring-expression@5.3.34
Reject Copyleft Strong on PRs pkg:maven/commons-lang/commons-lang@2.4
Reject Copyleft Strong on PRs pkg:maven/org.codehaus.groovy/groovy-all@2.4.21
buildguy commented 1 month ago

:x: Build failed in 21m 21s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago

:x: Build failed in 14m 6s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:exclamation: No tests found!

:information_source: This is an automatic message

buildguy commented 1 month ago

:white_check_mark: Build finished in 32m 30s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 1 month ago
[![👍 Frogbot scanned this pull request and found that it did not add vulnerable dependencies.](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/noVulnerabilityBannerPR.png)](https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot)

[🐸 JFrog Frogbot](https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot)
buildguy commented 1 month ago

:white_check_mark: Build finished in 38m 19s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 4 weeks ago

:x: Build failed in 16m 17s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message

buildguy commented 4 weeks ago

:x: Build failed in 7m 13s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:exclamation: No tests found!

:information_source: This is an automatic message

buildguy commented 4 weeks ago

:x: Build failed in 16s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:exclamation: No tests found!

:information_source: This is an automatic message

buildguy commented 4 weeks ago

Threatrix logo

mondrian project's entity: Pentaho Legacy

Vulnerabilities

Severity Count
Medium 4

Licenses

Category Count
Copyleft Weak 22

Asset Composition

Type Count
Embedded 12
Open Source 1086
Unique 112

Policy Violations

Policy Name Artifact name Note
Create Jira pkg:maven/org.springframework/spring-expression@5.3.34
Create Jira pkg:maven/ognl/ognl@2.6.9
Create Jira pkg:maven/org.dom4j/dom4j@2.1.4
buildguy commented 4 weeks ago

Threatrix logo

mondrian project's entity: Pentaho Legacy

Vulnerabilities

Severity Count
Medium 4

Licenses

Category Count
Copyleft Weak 22

Asset Composition

Type Count
Embedded 12
Open Source 1086
Unique 112

Policy Violations

Policy Name Artifact name Note
Create Jira pkg:maven/org.springframework/spring-expression@5.3.34
Create Jira pkg:maven/ognl/ognl@2.6.9
Create Jira pkg:maven/org.dom4j/dom4j@2.1.4
hitachivantarasonarqube[bot] commented 4 weeks ago

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

buildguy commented 4 weeks ago
[![👍 Frogbot scanned this pull request and did not find any new security issues.](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/noVulnerabilityBannerPR.png)](https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot)

[🐸 JFrog Frogbot](https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot)
buildguy commented 4 weeks ago

:white_check_mark: Build finished in 27m 44s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -DrunITs

:ok_hand: All tests passed!

Tests run: 3307, Failures: 0, Skipped: 0    Test Results


:information_source: This is an automatic message