Skip to content

Bump project-ncl/shared-github-actions/.github/workflows/maven-ci.yml from 0.0.22 to 0.0.23 - #1095

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/project-ncl/shared-github-actions/dot-github/workflows/maven-ci.yml-0.0.23
Open

Bump project-ncl/shared-github-actions/.github/workflows/maven-ci.yml from 0.0.22 to 0.0.23#1095
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/project-ncl/shared-github-actions/dot-github/workflows/maven-ci.yml-0.0.23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps project-ncl/shared-github-actions/.github/workflows/maven-ci.yml from 0.0.22 to 0.0.23.

Release notes

Sourced from project-ncl/shared-github-actions/.github/workflows/maven-ci.yml's releases.

v0.0.23

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 CI Dependencies

Full Changelog: project-ncl/shared-github-actions@v0.0.22...v0.0.23

Commits
  • 646d9b6 Merge pull request #113 from rnc/BR1
  • c3d39a7 Update README
  • 72c18d4 Merge pull request #112 from rnc/BR1
  • 8f83747 Fix gh release. Remove release_type.
  • 1184278 Merge pull request #111 from rnc/GRADLERELEASE
  • 83338f8 Merge pull request #110 from project-ncl/dependabot/github_actions/project-nc...
  • 4768239 Merge pull request #109 from project-ncl/dependabot/github_actions/project-nc...
  • 1f0a576 Merge pull request #108 from project-ncl/dependabot/github_actions/project-nc...
  • 3f6ac23 Merge pull request #107 from project-ncl/dependabot/github_actions/zizmorcore...
  • 1f44af1 Merge pull request #106 from project-ncl/dependabot/github_actions/gradle/act...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump project-ncl/shared-github-actions/.github/workflows/maven-ci.yml
83e630f 
Bumps [project-ncl/shared-github-actions/.github/workflows/maven-ci.yml](https://github.com/project-ncl/shared-github-actions) from 0.0.22 to 0.0.23.
- [Release notes](https://github.com/project-ncl/shared-github-actions/releases)
- [Commits](project-ncl/shared-github-actions@a27e6fb...646d9b6)

---
updated-dependencies:
- dependency-name: project-ncl/shared-github-actions/.github/workflows/maven-ci.yml
  dependency-version: 0.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Aug 24, 2026
@github-actions

github-actions Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output 



Identified 422 dependencies

Detected 34 vulnerabilities (2 Critical, 15 High, 16 Medium, 1 Low)

+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |                    LIBRARY                    |       ID       |                                               TOP FIX                                                |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | httpclient5-5.6.3.jar                         | CVE-2026-71290 | Upgrade to version  https://github.com/apache/httpcomponents-client.git - rel/v5.6.4,                |
|          |                                               |                | org.apache.httpcomponents.client5:httpclient5:5.6.4                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | netty-handler-4.1.135.Final.jar               | CVE-2026-75595 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.137.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.17.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jsoup-1.21.2.jar                              | CVE-2026-75140 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jsoup-1.22.2.jar                              | CVE-2026-75140 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-4.1.135.Final.jar                 | CVE-2026-59901 | io.netty:netty-codec-compression:4.2.16.Final,io.netty:netty-codec:4.1.136.Final                     |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.135.Final.jar         | CVE-2026-55851 | Upgrade to version io.netty:netty-codec-haproxy:4.2.16.Final,                                        |
|          |                                               |                | io.netty:netty-codec-haproxy:4.1.136.Final, https://github.com/netty/netty.git - netty-4.2.16.Final, |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final                                             |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.135.Final.jar            | CVE-2026-55831 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.135.Final.jar            | CVE-2026-55833 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.135.Final.jar            | CVE-2026-56745 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.16.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.135.Final.jar           | CVE-2026-56819 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final,io.netty:netty-codec-http2:4.2.16.Final, |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.16.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.135.Final.jar           | CVE-2026-59900 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final                                          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.135.Final.jar               | CVE-2026-62243 | Upgrade to version io.netty:netty-handler:4.1.137.Final,io.netty:netty-handler:4.2.17.Final          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.135.Final.jar               | CVE-2026-75596 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.17.Final, https://github.com/netty/netty.git -        |
|          |                                               |                | netty-4.1.137.Final                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | sshd-common-2.17.1.jar                        | CVE-2026-56624 | Upgrade to version  https://github.com/apache/mina-sshd.git - sshd-3.0.0-M5,                         |
|          |                                               |                | org.apache.sshd:sshd-core:2.19.0,org.apache.sshd:sshd-common:3.0.0-M5,                               |
|          |                                               |                | org.apache.sshd:sshd-core:3.0.0-M5, https://github.com/apache/mina-sshd.git - sshd-2.19.0,           |
|          |                                               |                | org.apache.sshd:sshd-common:2.19.0                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-core-4.5.28.jar                         | CVE-2026-15075 | Upgrade to version  https://github.com/eclipse-vertx/vert.x.git - 5.1.5,io.vertx:vertx-core:4.5.30,  |
|          |                                               |                | io.vertx:vertx-core:5.1.5, https://github.com/eclipse-vertx/vert.x.git - 4.5.30                      |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-web-client-4.5.28.jar                   | CVE-2026-15076 | Upgrade to version io.vertx:vertx-web-client:4.5.30, https://github.com/vert-x3/vertx-web.git -      |
|          |                                               |                | 4.5.30, https://github.com/vert-x3/vertx-web.git - 5.1.5,io.vertx:vertx-web-client:5.1.5             |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | wildfly-elytron-password-impl-2.9.1.Final.jar | CVE-2026-19611 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-54515 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.4,      |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,                                                  |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.9,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.5,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.1                          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-59889 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.21.5,                               |
|          |                                               |                | tools.jackson.core:jackson-databind:3.1.5,tools.jackson.core:jackson-databind:3.2.1,                 |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jsoup-1.21.2.jar                              | CVE-2026-71497 | Upgrade to version org.jsoup:jsoup:1.23.1, https://github.com/jhy/jsoup.git - jsoup-1.23.1           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jsoup-1.22.2.jar                              | CVE-2026-71497 | Upgrade to version org.jsoup:jsoup:1.23.1, https://github.com/jhy/jsoup.git - jsoup-1.23.1           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | kerby-asn1-2.1.0.jar                          | CVE-2026-57914 | Upgrade to version org.apache.kerby:kerby-asn1:2.1.2                                                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | lz4-java-1.10.1.jar                           | CVE-2026-59949 | Upgrade to version  https://github.com/yawkat/lz4-java.git - v1.11.1                                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | micrometer-core-1.16.6.jar                    | CVE-2026-59296 | Upgrade to version io.micrometer:micrometer-registry-statsd:1.16.7,                                  |
|          |                                               |                | io.micrometer:micrometer-registry-statsd:1.17.1,                                                     |
|          |                                               |                | https://github.com/micrometer-metrics/micrometer.git - v1.16.7,io.micrometer:micrometer-core:1.17.1, |
|          |                                               |                | io.micrometer:micrometer-core:1.16.7, https://github.com/micrometer-metrics/micrometer.git - v1.17.1 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-dns-4.1.135.Final.jar             | CVE-2026-73508 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.136.Final                         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-haproxy-4.1.135.Final.jar         | CVE-2026-59919 | io.netty:netty-codec-haproxy:4.1.136.Final,io.netty:netty-codec-haproxy:4.2.16.Final                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-56746 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.16.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59898 | io.netty:netty-codec-http:4.1.136.Final,io.netty:netty-codec-http:4.2.16.Final                       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59899 | io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final                       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59903 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.137.Final,                        |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.17.Final                                              |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59921 | io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final                       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-socks-4.1.135.Final.jar           | CVE-2026-62380 | Upgrade to version io.netty:netty-codec-socks:4.2.17.Final,io.netty:netty-codec-socks:4.1.137.Final  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | opentelemetry-api-1.60.1.jar                  | CVE-2026-45292 | Upgrade to version  https://github.com/open-telemetry/opentelemetry-java.git - v1.62.0,              |
|          |                                               |                | io.opentelemetry:opentelemetry-extension-trace-propagators:1.62.0                                    |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| LOW      | jansi-2.4.0.jar                               | CVE-2026-8484  | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

quarkus-micrometer-opentelemetry-3.37.0.jar
|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- quarkus-micrometer-3.37.0.jar
	|-- lz4-java-1.10.1.jar [1 MEDIUM]
	|-- micrometer-core-1.16.6.jar [1 MEDIUM]
		|-- httpclient5-5.6.3.jar [1 CRITICAL]
	|-- quarkus-vertx-http-3.37.0.jar
		|-- smallrye-mutiny-vertx-web-3.22.2.jar
			|-- smallrye-mutiny-vertx-uri-template-3.22.2.jar
				|-- vertx-uri-template-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-4.5.28.jar
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- kafka-clients-4.2.1.jar
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
|-- quarkus-opentelemetry-3.37.0.jar
	|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-annotations-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-api-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-jdbc-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
		|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-api-incubator-1.60.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-common-1.60.1.jar
		|-- opentelemetry-exporter-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-1.60.1.jar
		|-- opentelemetry-sdk-metrics-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-trace-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-sdk-1.60.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-logs-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-grpc-common-3.37.0.jar
		|-- vertx-grpc-server-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-4.5.28.jar
			|-- grpc-netty-1.81.0.jar
				|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-tls-registry-3.37.0.jar
		|-- smallrye-private-key-pem-parser-0.9.3.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-3.37.0.jar
		|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- quarkus-netty-3.37.0.jar
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- quarkus-virtual-threads-3.37.0.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- smallrye-common-vertx-context-2.18.1.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-handler-proxy-4.1.135.Final.jar
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-socks-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-resolver-dns-4.1.135.Final.jar
				|-- netty-codec-dns-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
	|-- vertx-grpc-client-4.5.28.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-common-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
analyzer-app-2.0.4-SNAPSHOT.jar
|-- quarkus-elytron-security-ldap-3.37.0.jar
	|-- quarkus-elytron-security-3.37.0.jar
		|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
		|-- wildfly-elytron-realm-2.9.1.Final.jar
			|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
	|-- wildfly-elytron-realm-ldap-2.9.1.Final.jar
		|-- wildfly-elytron-client-2.9.1.Final.jar
			|-- wildfly-elytron-auth-util-2.9.1.Final.jar
				|-- sshd-common-2.17.1.jar [1 HIGH]
			|-- wildfly-elytron-credential-source-impl-2.9.1.Final.jar
				|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
			|-- wildfly-elytron-credential-store-2.9.1.Final.jar
				|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
			|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
|-- quarkus-infinispan-client-3.37.0.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-elytron-security-common-3.37.0.jar
		|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
	|-- quarkus-netty-3.37.0.jar
		|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
	|-- protostream-types-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- infinispan-client-hotrod-16.0.13.jar
		|-- micrometer-core-1.16.6.jar [1 MEDIUM]
			|-- httpclient5-5.6.3.jar [1 CRITICAL]
		|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-resolver-dns-4.1.135.Final.jar
			|-- netty-codec-dns-4.1.135.Final.jar [1 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- infinispan-commons-16.0.13.jar
			|-- micrometer-core-1.16.6.jar [1 MEDIUM]
		|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
	|-- wildfly-elytron-ssh-util-2.9.1.Final.jar
		|-- sshd-common-2.17.1.jar [1 HIGH]
|-- quarkus-micrometer-opentelemetry-3.37.0.jar
	|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
		|-- opentelemetry-instrumentation-api-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-micrometer-3.37.0.jar
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- micrometer-core-1.16.6.jar [1 MEDIUM]
		|-- resteasy-reactive-client-3.37.0.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
	|-- quarkus-opentelemetry-3.37.0.jar
		|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-annotations-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-jdbc-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
			|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-common-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-grpc-common-3.37.0.jar
			|-- vertx-grpc-server-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-4.5.28.jar
				|-- grpc-netty-1.81.0.jar
					|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-client-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-oidc-client-3.37.0.jar
	|-- quarkus-oidc-common-3.37.0.jar
		|-- smallrye-mutiny-vertx-web-client-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-3.37.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- smallrye-fault-tolerance-core-6.11.1.jar
				|-- micrometer-core-1.16.6.jar [1 MEDIUM]
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-rest-jackson-3.37.0.jar
	|-- quarkus-rest-jackson-common-3.37.0.jar
		|-- quarkus-jackson-3.37.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-rest-3.37.0.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- resteasy-reactive-vertx-3.37.0.jar
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-client-4.5.28.jar [1 HIGH]
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-uri-template-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-virtual-threads-3.37.0.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-handler-proxy-4.1.135.Final.jar
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-socks-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
|-- quarkus-smallrye-openapi-3.37.0.jar
	|-- quarkus-vertx-http-3.37.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- quarkus-tls-registry-3.37.0.jar
			|-- smallrye-private-key-pem-parser-0.9.3.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.18.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-4.5.28.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- smallrye-open-api-core-4.3.3.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- jackson-dataformat-yaml-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- analyzer-core-2.0.4-SNAPSHOT.jar
	|-- quarkus-rest-client-jackson-3.37.0.jar
		|-- resteasy-reactive-jackson-3.37.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- quarkus-smallrye-fault-tolerance-3.37.0.jar
		|-- smallrye-fault-tolerance-6.11.1.jar
			|-- micrometer-core-1.16.6.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- commons-vfs2-2.10.0.jar
		|-- httpclient5-5.6.3.jar [1 CRITICAL]
	|-- httpclient5-5.6.3.jar [1 CRITICAL]
	|-- maven-core-3.9.15.jar
		|-- maven-shared-utils-3.4.2.jar
			|-- jansi-2.4.0.jar [1 LOW]
	|-- analyzer-model-2.0.4-SNAPSHOT.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- kojiji-2.25.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- kerb-client-2.1.0.jar
				|-- kerb-core-2.1.0.jar
					|-- kerby-pkix-2.1.0.jar
						|-- kerby-asn1-2.1.0.jar [1 MEDIUM]
		|-- dto-3.5.6-jakarta.jar
			|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
	|-- java-spdx-library-2.0.3.jar
		|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
		|-- spdx-java-core-1.0.3.jar
			|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
|-- quarkus-logging-kafka-deployment-3.0.5.jar
	|-- quarkus-arc-deployment-3.37.0.jar
		|-- quarkus-core-deployment-3.37.0.jar
			|-- readline-2.6.jar
				|-- jansi-2.4.0.jar [1 LOW]
|-- quarkus-logging-kafka-3.0.5.jar
	|-- kafka-log4j-appender-3.9.2.jar
		|-- kafka-clients-4.2.1.jar
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- pnc-common-3.5.1-jakarta.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- jackson-datatype-jdk8-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- jackson-datatype-jsr310-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- jackson-module-parameter-names-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- pom-manipulation-common-lite-5.3.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- reports-model-2.6.9.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- opentelemetry-ext-cli-java-2.1.0.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-semconv-1.29.0-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
		|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
		|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
analyzer-core-2.0.4-SNAPSHOT.jar
|-- quarkus-infinispan-client-3.37.0.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-elytron-security-common-3.37.0.jar
		|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
	|-- quarkus-netty-3.37.0.jar
		|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
	|-- protostream-types-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- infinispan-client-hotrod-16.0.13.jar
		|-- micrometer-core-1.16.6.jar [1 MEDIUM]
		|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-resolver-dns-4.1.135.Final.jar
			|-- netty-codec-dns-4.1.135.Final.jar [1 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- infinispan-commons-16.0.13.jar
			|-- micrometer-core-1.16.6.jar [1 MEDIUM]
		|-- wildfly-elytron-password-impl-2.9.1.Final.jar [1 HIGH]
	|-- wildfly-elytron-ssh-util-2.9.1.Final.jar
		|-- sshd-common-2.17.1.jar [1 HIGH]
|-- quarkus-micrometer-opentelemetry-3.37.0.jar
	|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-micrometer-3.37.0.jar
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- micrometer-core-1.16.6.jar [1 MEDIUM]
	|-- quarkus-opentelemetry-3.37.0.jar
		|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-annotations-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-api-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-jdbc-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
			|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-common-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-grpc-common-3.37.0.jar
			|-- vertx-grpc-server-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-4.5.28.jar
				|-- grpc-netty-1.81.0.jar
					|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-client-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-rest-client-jackson-3.37.0.jar
	|-- resteasy-reactive-jackson-3.37.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- quarkus-rest-client-3.37.0.jar
	|-- quarkus-tls-registry-3.37.0.jar
		|-- smallrye-private-key-pem-parser-0.9.3.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-4.5.28.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-rest-jackson-3.37.0.jar
	|-- quarkus-rest-jackson-common-3.37.0.jar
		|-- quarkus-jackson-3.37.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-rest-3.37.0.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- resteasy-reactive-vertx-3.37.0.jar
		|-- resteasy-reactive-client-3.37.0.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-client-4.5.28.jar [1 HIGH]
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-uri-template-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-http-3.37.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- quarkus-virtual-threads-3.37.0.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-handler-proxy-4.1.135.Final.jar
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-socks-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
|-- quarkus-scheduler-3.37.0.jar
	|-- quarkus-vertx-3.37.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.18.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-smallrye-fault-tolerance-3.37.0.jar
	|-- smallrye-fault-tolerance-mutiny-6.11.1.jar
		|-- smallrye-fault-tolerance-core-6.11.1.jar
			|-- micrometer-core-1.16.6.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- smallrye-fault-tolerance-6.11.1.jar
		|-- micrometer-core-1.16.6.jar [1 MEDIUM]
			|-- httpclient5-5.6.3.jar [1 CRITICAL]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- commons-vfs2-2.10.0.jar
	|-- httpclient5-5.6.3.jar [1 CRITICAL]
|-- httpclient5-5.6.3.jar [1 CRITICAL]
|-- maven-core-3.9.15.jar
	|-- maven-shared-utils-3.4.2.jar
		|-- jansi-2.4.0.jar [1 LOW]
|-- analyzer-model-2.0.4-SNAPSHOT.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- jackson-datatype-jdk8-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- kojiji-2.25.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- kerb-client-2.1.0.jar
			|-- kerb-core-2.1.0.jar
				|-- kerby-pkix-2.1.0.jar
					|-- kerby-asn1-2.1.0.jar [1 MEDIUM]
	|-- dto-3.5.6-jakarta.jar
... *truncated, see full logs below*
SAST scan output 
*no findings*

Full logs and artifacts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants