Skip to content

dependencycheck 12.0.0 randomly fails with comparison method violates its general contract #7338

@johnou

Description

@johnou

Describe the bug

From time to time dependencycheck fails with java.lang.IllegalArgumentException: Comparison method violates its general contract

Version of dependency-check used

org.owasp.dependencycheck 12.0.0
gradle 7.6.4

Log file

https://gist.github.com/johnou/ab6a6d9a48ae98ff91450b904b1522ec

Expected behavior

No failure

Additional context

Multi module gradle project with nvd api key defined.

dependencyCheck {
    analyzers.retirejs.enabled = false
    analyzers.assemblyEnabled = false
    nvd.apiKey = System.getenv("NVD_API_KEY") ?: ""
}

subprojects {
    apply plugin: 'io.spring.dependency-management'
    apply plugin: 'idea'
    apply plugin: 'org.owasp.dependencycheck'
    apply plugin: 'jacoco'


    dependencyCheck {
        suppressionFile = "${rootDir}/dependency-check-suppress.xml"
        format = 'ALL'
        analyzers {
            assemblyEnabled = false
            retirejs {
                enabled = false
            }
        }
        nvd.apiKey = System.getenv("NVD_API_KEY") ?: ""
    }

...
}

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions