Skip to content

[improve][ci] Improve OWASP dependency checks - #21817

Merged
merlimat merged 5 commits into
apache:masterfrom
lhotari:lh-improve-owasp-dep-check
Dec 29, 2023
Merged

merlimat merged 5 commits into
apache:masterfrom
lhotari:lh-improve-owasp-dep-check

Conversation

@lhotari

@lhotari lhotari commented Dec 28, 2023

Copy link
Copy Markdown
Member

Motivation & Modifications

OWASP dependency check improvements:

  • restore checks for distribution/offloaders and distribution/io which were accidentially removed by [cleanup]Remove Trino/PrestoDB Pulsar plugin from main repo #21795
  • upgrade OWASP version to keep up-to-date
  • add suppression for false positive in jetty-servlets jar
  • scan branch-3.2
  • remove scanning of EOL branches branch-2.8 and branch-2.9

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

@lhotari lhotari added this to the 3.3.0 milestone Dec 28, 2023
@lhotari lhotari self-assigned this Dec 28, 2023
@github-actions github-actions Bot added the doc-not-needed Your PR changes do not impact docs label Dec 28, 2023
@lhotari lhotari changed the title [improve][CI] Improve OWASP dependency checks [improve][ci] Improve OWASP dependency checks Dec 28, 2023
@codecov-commenter

codecov-commenter commented Dec 28, 2023

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.58%. Comparing base (2d57624) to head (0d407ed).
⚠️ Report is 1656 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##             master   #21817      +/-   ##
============================================
- Coverage     73.64%   73.58%   -0.07%     
+ Complexity    32300    32275      -25     
============================================
  Files          1858     1858              
  Lines        138040   138098      +58     
  Branches      15116    15135      +19     
============================================
- Hits         101660   101619      -41     
- Misses        28549    28611      +62     
- Partials       7831     7868      +37     
Flag Coverage Δ
inttests 24.17% <ø> (-0.09%) ⬇️
systests 23.78% <ø> (-0.02%) ⬇️
unittests 72.86% <ø> (-0.07%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 68 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

doc-not-needed Your PR changes do not impact docs ready-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants