Skip to content

Commit a48a450

Browse files
update jar callgraph version (#1447)
* update jar callgraph version
1 parent 7ea8109 commit a48a450

File tree

4 files changed

+9
-5
lines changed

4 files changed

+9
-5
lines changed

Changelog.md

+4
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
# FOSSA CLI Changelog
22

3+
## 3.9.25
4+
5+
- Update jar-callgraph version [#1447](https://github.com/fossas/fossa-cli/pull/1447)
6+
37
## 3.9.24
48

59
- Container Scanning: Attempt to find JAR files in container images and report them as dependencies. ([#1442](https://github.com/fossas/fossa-cli/pull/1442), [#1444](https://github.com/fossas/fossa-cli/pull/1444))

docs/features/vuln_reachability.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -119,10 +119,10 @@ cat fossa.debug.json | jq '.bundleReachabilityEndpoint'
119119
}
120120
```
121121

122-
FOSSA CLI uses [jar-callgraph-1.0.0.jar](../../scripts/jar-callgraph-1.0.0.jar) to infer call path edges.
123-
FOSSA CLI uses `java -jar jar-callgraph-1.0.0.jar ./path/to/your/build.jar` command to record edges from
122+
FOSSA CLI uses [jar-callgraph-1.0.1.jar](../../scripts/jar-callgraph-1.0.1.jar) to infer call path edges.
123+
FOSSA CLI uses `java -jar jar-callgraph-1.0.1.jar ./path/to/your/build.jar` command to record edges from
124124
the your target jar. If you are running into issues with reachability, please confirm that you can execute
125-
`java -jar jar-callgraph-1.0.0.jar ./path/to/your/build.jar` on your environment.
125+
`java -jar jar-callgraph-1.0.1.jar ./path/to/your/build.jar` on your environment.
126126

127127
<!--
128128
## How do I debug reachability from endpoint?
Binary file not shown.

src/App/Fossa/Reachability/Jar.hs

+2-2
Original file line numberDiff line numberDiff line change
@@ -35,9 +35,9 @@ import System.FilePath qualified as FP
3535
newtype CallGraphJarParser = CallGraphJarParser {jar :: BS.ByteString}
3636
deriving (Eq, Ord, Show)
3737

38-
-- This jar is from: https://github.com/fossas/jar-callgraph/pull/1
38+
-- This jar is from: https://github.com/fossas/jar-callgraph/pull/52
3939
execJar :: CallGraphJarParser
40-
execJar = CallGraphJarParser{jar = $(embedFile' "scripts/jar-callgraph-1.0.0.jar")}
40+
execJar = CallGraphJarParser{jar = $(embedFile' "scripts/jar-callgraph-1.0.1.jar")}
4141

4242
withUnpackedPlugin ::
4343
( Has (Lift IO) sig m

0 commit comments

Comments
 (0)