Skip to content

Gitlab format report has invalid syntax for dependencies #6593

@david-eyeee

Description

@david-eyeee

Describe the bug
Under certain circumstances, the dependency-check-gitlab.json file has invalid syntax. Specifically, there is a trailing comma after the last package entry in the dependencies section of dependency_files. The dependency-check.json file does not have this issue. This is the section with the trailing comma:

{
"dependencies": [
{"package": {"name": "ComponentSpace.SAML2"},"version": "2.6.0.17"},
{"package": {"name": "select2"},"version": "3.4.3"},
{"package": {"name": "select2"},"version": "3.4.0"},
]
}

Version of dependency-check used
The problem occurs using version 9.1.0 of the docker image - owasp/dependency-check:9.1.0

Log file

To Reproduce

Expected behavior
dependency-check-gitlab.json should have valid syntax.

Additional context
I realize this bug report is missing lots of detail. This is a work account so unfortunately I cannot provide log files or the contents of the project that produced this error. However, I may be able to answer specific questions if you choose to pursue this issue. Thanks.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions