-
Notifications
You must be signed in to change notification settings - Fork 22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Security Violations and License Compliance Violations table not displaying in console output #178
Comments
Hi @lweitzel01, thank you for reporting this issue. |
It appears the new jf CLI 2.71 does now display the table. However, the table is now showing extra special characters that are throwing the cells out of alignment and making it hard to read. Here is the table from the old version of jf: AND here is the new table with version 2.71
|
Is there any update on this or a way to turn off the ANSI colorization in the output of these tables? |
Describe the bug
After upgrading from jf cli 2.63.2 to 2.67.0, the jf build-scan is no longer displaying the Security Violations and License Compliance Violations table in the console output
Current behavior
Current behavior when running jf build-scan with version 2.67.0:
13:07:29 [Info] Scan of build ### is in progress
13:07:29 [Info] Waiting for Build Scan to complete...
13:07:30 [Info] The scan data is available at: https://###
The full scan results are available here: .jfrog\jfrog.cli.temp.-1726250850-2443012921
13:07:30 [Info] Trace ID for JFrog Platform logs: f2b9a375525fbbac
13:07:30 [Error] One or more of the violations found are set to fail builds that include them
The old behavior with 2.63.2
13:07:17 [Info] Scan of build ### is in progress
13:07:18 [Info] Waiting for Build Scan to complete...
13:07:28 [Info] The scan data is available at: https://###
The full scan results are available here: .jfrog\jfrog.cli.temp.-1726250848-220682823
Security Violations
┌──────────┬───────────────────────────┬─────────┬───────────────────────────┬──────────┬──────────┬───────┬────────────────┐
│ SEVERITY │ DIRECT │ DIRECT │ IMPACTED │ IMPACTED │ FIXED │ TYPE │ CVE │
│ │ PACKAGE │ PACKAGE │ PACKAGE │ PACKAGE │ VERSIONS │ │ │
│ │ │ VERSION │ NAME │ VERSION │ │ │ │
├──────────┼───────────────────────────┼─────────┼───────────────────────────┼──────────┼──────────┼───────┼────────────────┤
│ Critical │ jpetstore-1.06-20240913.1 │ │ com.thoughtworks.xstream: │ 1.3.1 │ [1.4.16] │ Maven │ CVE-2021-21345 │
│ │ 80712-1.war │ │ xstream │ │ │ │ │
│ │ │ │ │ │ │ │ │
└──────────┴───────────────────────────┴─────────┴───────────────────────────┴──────────┴──────────┴───────┴────────────────┘
License Compliance Violations
+---------------------------------------------+
| No license compliance violations were found |
+---------------------------------------------+
13:07:28 [Info] Trace ID for JFrog Platform logs: 6099fde7470bdc3c
13:07:28 [Error] One or more of the violations found are set to fail builds that include them
Reproduction steps
Upload artifact to artifactory and run jf build-scan to wait for scan to complete
Expected behavior
Expected Security Violations and License Compliance Violations table to display indicating violations to user
JFrog CLI-Security version
??
JFrog CLI version (if applicable)
2.67.0
Operating system type and version
Windows 2019
JFrog Xray version
3.102.3
The text was updated successfully, but these errors were encountered: