Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-48989

Anchore Plugin is affected by JEP-200 in Jenkins 2.102+

      Due to the changes in Jenkins 2.102 our builds are failing with following error

       

      java.lang.UnsupportedOperationException: Refusing to marshal com.google.common.collect.Maps$TransformedEntriesMap for security reasons; see https://jenkins.io/redirect/class-filter/
      	at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:530)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize com.anchore.jenkins.plugins.anchore.AnchoreAction#queryOutputUrls for class com.anchore.jenkins.plugins.anchore.AnchoreAction
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
      	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
      	at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
      	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
      Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class org.jenkinsci.plugins.workflow.job.WorkflowRun
      	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
      	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
      	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
      	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
      	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
      	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
      	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
      	at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)
      	at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)
      	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)
      	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)
      	at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)
      	at hudson.XmlFile.write(XmlFile.java:194)
      Caused: java.io.IOException
      	at hudson.XmlFile.write(XmlFile.java:201)
      	at hudson.model.Run.save(Run.java:1923)
      	at hudson.util.PersistedList.onModified(PersistedList.java:173)
      	at hudson.util.PersistedList._onModified(PersistedList.java:181)
      Caused: java.lang.RuntimeException
      	at hudson.util.PersistedList._onModified(PersistedList.java:183)
      	at hudson.util.PersistedList.add(PersistedList.java:72)
      	at org.jenkinsci.plugins.workflow.job.WorkflowRun.onCheckout(WorkflowRun.java:819)
      	at org.jenkinsci.plugins.workflow.job.WorkflowRun.access$1500(WorkflowRun.java:134)
      	at org.jenkinsci.plugins.workflow.job.WorkflowRun$SCMListenerImpl.onCheckout(WorkflowRun.java:1002)
      	at org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:127)
      	at org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:85)
      	at org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:75)
      	at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1$1.call(AbstractSynchronousNonBlockingStepExecution.java:47)
      	at hudson.security.ACL.impersonate(ACL.java:274)
      	at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1.run(AbstractSynchronousNonBlockingStepExecution.java:44)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Finished: FAILURE
      

          [JENKINS-48989] Anchore Plugin is affected by JEP-200 in Jenkins 2.102+

          Anton Gruebel added a comment -

          Hi oleg_nenashev

          I added following to my JVM args

          -Dhudson.remoting.ClassFilter=com.google.common.collect.Maps$TransformedEntriesMap

          but I still got the same error. Am I doing something wrong?

          Then I tried to disable it completly by adding this option

          -Djenkins.security.ClassFilterImpl.SUPPRESS_WHITELIST=true

          and then I got following error

          java.lang.UnsupportedOperationException: Refusing to marshal net.sf.json.JSONObject for security reasons; see https://jenkins.io/redirect/class-filter/
          	at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:530)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
          	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
          	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
          	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
          Caused: java.lang.RuntimeException: Failed to serialize com.anchore.jenkins.plugins.anchore.AnchoreAction#gateSummary for class com.anchore.jenkins.plugins.anchore.AnchoreAction
          	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
          	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
          	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
          	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
          	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
          	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
          	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88)
          	at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64)
          	at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
          	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84)
          	at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265)
          	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252)
          Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class org.jenkinsci.plugins.workflow.job.WorkflowRun
          	at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256)
          	at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224)
          	at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138)
          	at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209)
          	at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150)
          	at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69)
          	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58)
          	at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43)
          	at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82)
          	at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37)
          	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026)
          	at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015)
          	at com.thoughtworks.xstream.XStream.toXML(XStream.java:988)
          	at hudson.XmlFile.write(XmlFile.java:194)
          Caused: java.io.IOException
          	at hudson.XmlFile.write(XmlFile.java:201)
          	at hudson.model.Run.save(Run.java:1923)
          	at hudson.util.PersistedList.onModified(PersistedList.java:173)
          	at hudson.util.PersistedList._onModified(PersistedList.java:181)
          Caused: java.lang.RuntimeException
          	at hudson.util.PersistedList._onModified(PersistedList.java:183)
          	at hudson.util.PersistedList.add(PersistedList.java:72)
          	at org.jenkinsci.plugins.workflow.job.WorkflowRun.onCheckout(WorkflowRun.java:819)
          	at org.jenkinsci.plugins.workflow.job.WorkflowRun.access$1500(WorkflowRun.java:134)
          	at org.jenkinsci.plugins.workflow.job.WorkflowRun$SCMListenerImpl.onCheckout(WorkflowRun.java:1002)
          	at org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:127)
          	at org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:85)
          	at org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:75)
          	at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1$1.call(AbstractSynchronousNonBlockingStepExecution.java:47)
          	at hudson.security.ACL.impersonate(ACL.java:274)
          	at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1.run(AbstractSynchronousNonBlockingStepExecution.java:44)
          	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
          	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
          	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
          	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
          	at java.lang.Thread.run(Thread.java:745)
          Finished: FAILURE
          

          Anton Gruebel added a comment - Hi oleg_nenashev I added following to my JVM args -Dhudson.remoting.ClassFilter=com.google.common.collect.Maps$TransformedEntriesMap but I still got the same error. Am I doing something wrong? Then I tried to disable it completly by adding this option -Djenkins.security.ClassFilterImpl.SUPPRESS_WHITELIST=true and then I got following error java.lang.UnsupportedOperationException: Refusing to marshal net.sf.json.JSONObject for security reasons; see https: //jenkins.io/redirect/ class- filter/ at hudson.util.XStream2$BlacklistedTypesConverter.marshal(XStream2.java:530) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84) at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265) at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252) Caused: java.lang.RuntimeException: Failed to serialize com.anchore.jenkins.plugins.anchore.AnchoreAction#gateSummary for class com.anchore.jenkins.plugins.anchore.AnchoreAction at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256) at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224) at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138) at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209) at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:88) at com.thoughtworks.xstream.converters.collections.AbstractCollectionConverter.writeItem(AbstractCollectionConverter.java:64) at com.thoughtworks.xstream.converters.collections.CollectionConverter.marshal(CollectionConverter.java:74) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller$1.convertAnother(AbstractReferenceMarshaller.java:84) at hudson.util.RobustReflectionConverter.marshallField(RobustReflectionConverter.java:265) at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:252) Caused: java.lang.RuntimeException: Failed to serialize hudson.model.Actionable#actions for class org.jenkinsci.plugins.workflow.job.WorkflowRun at hudson.util.RobustReflectionConverter$2.writeField(RobustReflectionConverter.java:256) at hudson.util.RobustReflectionConverter$2.visit(RobustReflectionConverter.java:224) at com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider.visitSerializableFields(PureJavaReflectionProvider.java:138) at hudson.util.RobustReflectionConverter.doMarshal(RobustReflectionConverter.java:209) at hudson.util.RobustReflectionConverter.marshal(RobustReflectionConverter.java:150) at com.thoughtworks.xstream.core.AbstractReferenceMarshaller.convert(AbstractReferenceMarshaller.java:69) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:58) at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43) at com.thoughtworks.xstream.core.TreeMarshaller.start(TreeMarshaller.java:82) at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.marshal(AbstractTreeMarshallingStrategy.java:37) at com.thoughtworks.xstream.XStream.marshal(XStream.java:1026) at com.thoughtworks.xstream.XStream.marshal(XStream.java:1015) at com.thoughtworks.xstream.XStream.toXML(XStream.java:988) at hudson.XmlFile.write(XmlFile.java:194) Caused: java.io.IOException at hudson.XmlFile.write(XmlFile.java:201) at hudson.model.Run.save(Run.java:1923) at hudson.util.PersistedList.onModified(PersistedList.java:173) at hudson.util.PersistedList._onModified(PersistedList.java:181) Caused: java.lang.RuntimeException at hudson.util.PersistedList._onModified(PersistedList.java:183) at hudson.util.PersistedList.add(PersistedList.java:72) at org.jenkinsci.plugins.workflow.job.WorkflowRun.onCheckout(WorkflowRun.java:819) at org.jenkinsci.plugins.workflow.job.WorkflowRun.access$1500(WorkflowRun.java:134) at org.jenkinsci.plugins.workflow.job.WorkflowRun$SCMListenerImpl.onCheckout(WorkflowRun.java:1002) at org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:127) at org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:85) at org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:75) at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1$1.call(AbstractSynchronousNonBlockingStepExecution.java:47) at hudson.security.ACL.impersonate(ACL.java:274) at org.jenkinsci.plugins.workflow.steps.AbstractSynchronousNonBlockingStepExecution$1.run(AbstractSynchronousNonBlockingStepExecution.java:44) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang. Thread .run( Thread .java:745) Finished: FAILURE

          Oleg Nenashev added a comment -

          No, you are doing it right. Now we know that the plugin is broken for sure. JSONObjects should not be serialized

          Oleg Nenashev added a comment - No, you are doing it right. Now we know that the plugin is broken for sure. JSONObjects should not be serialized

          Oleg Nenashev added a comment -

          OK, so the issues are starting from here: https://github.com/jenkinsci/anchore-container-scanner-plugin/blob/efc65a874512961ac0b3523aa999237b7aad7068/src/main/java/com/anchore/jenkins/plugins/anchore/AnchoreAction.java#L23 . nurmi do you have time to work on this issue? It is a vendor-provided plugin with few installations, so I'd guess we won't get to it soon taking other JEP-200 issues into account

          Oleg Nenashev added a comment - OK, so the issues are starting from here: https://github.com/jenkinsci/anchore-container-scanner-plugin/blob/efc65a874512961ac0b3523aa999237b7aad7068/src/main/java/com/anchore/jenkins/plugins/anchore/AnchoreAction.java#L23 . nurmi do you have time to work on this issue? It is a vendor-provided plugin with few installations, so I'd guess we won't get to it soon taking other JEP-200 issues into account

          Daniel Nurmi added a comment -

          Hi all,

          We'll take a look at the issue and track progress in this ticket - thanks!

          Best

          -Dan

          Daniel Nurmi added a comment - Hi all, We'll take a look at the issue and track progress in this ticket - thanks! Best -Dan

          Daniel Nurmi added a comment -

          All,

          quick update on this - we're following the recommendations here (https://jenkins.io/redirect/class-filter/) in the plugin, using plainer types to avoid the aforementioned introduced incompatibilities.  

          We're testing a solution now, but would like to clarify - gruebel - can you share your plugin configuration so that we can be sure that our testing covers your use case (engine mode or local mode, buildOnFail, pipeline or not, any short description of your setup would be helpful!)

           

          Best

          -Dan

          Daniel Nurmi added a comment - All, quick update on this - we're following the recommendations here ( https://jenkins.io/redirect/class-filter/)  in the plugin, using plainer types to avoid the aforementioned introduced incompatibilities.   We're testing a solution now, but would like to clarify - gruebel - can you share your plugin configuration so that we can be sure that our testing covers your use case (engine mode or local mode, buildOnFail, pipeline or not, any short description of your setup would be helpful!)   Best -Dan

          Code changed in jenkins
          User: Daniel Nurmi
          Path:
          src/main/java/com/anchore/jenkins/plugins/anchore/AnchoreAction.java
          src/main/java/com/anchore/jenkins/plugins/anchore/BuildWorker.java
          http://jenkins-ci.org/commit/anchore-container-scanner-plugin/e76d6283b97d72c5775143dfc1f4d6fef6cc5f7f
          Log:
          use plainer types for AnchoreAction members - Fixes JENKINS-48989

          Signed-off-by: Daniel Nurmi <nurmi@anchore.com>

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Daniel Nurmi Path: src/main/java/com/anchore/jenkins/plugins/anchore/AnchoreAction.java src/main/java/com/anchore/jenkins/plugins/anchore/BuildWorker.java http://jenkins-ci.org/commit/anchore-container-scanner-plugin/e76d6283b97d72c5775143dfc1f4d6fef6cc5f7f Log: use plainer types for AnchoreAction members - Fixes JENKINS-48989 Signed-off-by: Daniel Nurmi <nurmi@anchore.com>

          Oleg Nenashev added a comment -

          The fix has been released in 1.0.13

          Oleg Nenashev added a comment - The fix has been released in 1.0.13

          Anton Gruebel added a comment -

          Thanks oleg_nenashev, it works with the new update!

          nurmi, do you still need my setup?

          Anton Gruebel added a comment - Thanks oleg_nenashev , it works with the new update! nurmi , do you still need my setup?

          Daniel Nurmi added a comment -

          Hi Anton,

          It would still be good to know, but we did roll a new version of the plugin yesterday (version 1.0.13) which should address the issue, and it sounds like you got the update and things are working again (correct me if I'm mistaken!)

          Best

          -Dan

          Daniel Nurmi added a comment - Hi Anton, It would still be good to know, but we did roll a new version of the plugin yesterday (version 1.0.13) which should address the issue, and it sounds like you got the update and things are working again (correct me if I'm mistaken!) Best -Dan

          Anton Gruebel added a comment -

          Hi Dan,

          yeah it fixed my problem.

          Here is the setup:

          • local mode
          • pipeline build
          writeFile (
            file: 'anchore_images',
            text: "app:${git_commit} ${WORKSPACE}/Dockerfile"
          )
          
          anchore (
            bailOnFail: false,
            bailOnPluginFail: false,
            bailOnWarn: false,
            doCleanup: false,
            inputQueries: [
              [query: 'list-packages all'],
              [query: 'list-files all'],
              [query: 'cve-scan all'],
              [query: 'show-pkg-diffs base']
            ],
            name: 'anchore_images',
            policyName: 'jenkins/anchore/anchore_policy'
          )
          

          Anton Gruebel added a comment - Hi Dan, yeah it fixed my problem. Here is the setup: local mode pipeline build writeFile ( file: 'anchore_images' , text: "app:${git_commit} ${WORKSPACE}/Dockerfile" ) anchore ( bailOnFail: false , bailOnPluginFail: false , bailOnWarn: false , doCleanup: false , inputQueries: [ [query: 'list-packages all' ], [query: 'list-files all' ], [query: 'cve-scan all' ], [query: 'show-pkg-diffs base' ] ], name: 'anchore_images' , policyName: 'jenkins/anchore/anchore_policy' )

            nurmi Daniel Nurmi
            gruebel Anton Gruebel
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: