Skip to content

Commit 72a7261

Browse files
authoredSep 7, 2022
fix snakeyaml vulnerability issue by disabling detekt (#237) (#240)
Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
·
1 parent dea1aed commit 72a7261

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed
 

‎build.gradle

+7-4
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ buildscript {
2323
classpath "${opensearch_group}.gradle:build-tools:${opensearch_version}"
2424
classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:${kotlin_version}"
2525
classpath "org.jetbrains.kotlin:kotlin-allopen:${kotlin_version}"
26-
classpath "io.gitlab.arturbosch.detekt:detekt-gradle-plugin:1.20.0-RC1"
26+
// classpath "io.gitlab.arturbosch.detekt:detekt-gradle-plugin:1.20.0-RC1"
2727
}
2828
}
2929

@@ -59,14 +59,15 @@ apply plugin: 'jacoco'
5959
apply plugin: 'signing'
6060
apply plugin: 'maven-publish'
6161
apply plugin: 'com.github.johnrengelman.shadow'
62-
apply plugin: 'io.gitlab.arturbosch.detekt'
62+
// apply plugin: 'io.gitlab.arturbosch.detekt'
6363
apply plugin: 'org.jetbrains.kotlin.jvm'
6464
apply plugin: 'org.jetbrains.kotlin.plugin.allopen'
6565
apply plugin: 'opensearch.repositories'
6666
apply from: 'build-tools/opensearchplugin-coverage.gradle'
6767

6868
configurations {
6969
ktlint
70+
all*.exclude group: 'org.yaml', module: 'snakeyaml'
7071
}
7172

7273
dependencies {
@@ -103,10 +104,12 @@ spotless {
103104
eclipse().configFile rootProject.file('.eclipseformat.xml')
104105
}
105106
}
106-
detekt {
107+
108+
// TODO: enable detekt only when snakeyaml vulnerability is fixed
109+
/*detekt {
107110
config = files("detekt.yml")
108111
buildUponDefaultConfig = true
109-
}
112+
}*/
110113

111114
task ktlint(type: JavaExec, group: "verification") {
112115
description = "Check Kotlin code style."

0 commit comments

Comments
 (0)
Please sign in to comment.