Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-68468

Prepare InsightVM Container Image Scanner for removal of JAXB and Java 11 requirement

XMLWordPrintable

      JAXB was removed from Java 9+. In 2.164, JAXB was detached into the JAXB API plugin, which means that any plugin with a Jenkins baseline prior to 2.164 will get JAXB on its classpath via the detached plugin mechanism. Any plugin with a Jenkins baseline greater than or equal to 2.164 will get JAXB on its classpath if and only if it declares a plugin-to-plugin dependency on JAXB (recommended) or embeds JAXB into its own .jpi via a direct or transitive dependency.

      A systematic search of the plugin corpus was conducted on May 9, 2022; this search revealed that this plugin has a baseline greater than or equal to 2.164, a direct or transitive usage of JAXB, no plugin-to-plugin dependency on JAXB, and no copy of JAXB in the .jpi. For compatibility with Java 11, this plugin must declare an explicit dependency on the JAXB API plugin as follows:

      <dependency>
        <groupId>io.jenkins.plugins</groupId>
        <artifactId>jaxb</artifactId>
        <version>2.3.6-1</version>
      </dependency>
      

      This plugin's identified usage of JAXB is as follows:

      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/adapters/XmlAdapter via javax/ws/rs/core/Link$JaxbAdapter.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/adapters/XmlAdapter via org/sonatype/goodies/packageurl/jaxb/PackageUrlXmlAdapter.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/adapters/XmlJavaTypeAdapter via org/sonatype/ossindex/service/api/componentreport/ComponentReport.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/adapters/XmlJavaTypeAdapter via org/sonatype/ossindex/service/api/componentreport/ComponentReportRequest.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAccessorType via org/sonatype/ossindex/service/api/componentreport/ComponentReport.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAccessorType via org/sonatype/ossindex/service/api/componentreport/ComponentReportRequest.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAccessorType via org/sonatype/ossindex/service/api/componentreport/ComponentReportVulnerability.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAccessType via org/sonatype/ossindex/service/api/componentreport/ComponentReport.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAccessType via org/sonatype/ossindex/service/api/componentreport/ComponentReportRequest.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAccessType via org/sonatype/ossindex/service/api/componentreport/ComponentReportVulnerability.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAnyAttribute via javax/ws/rs/core/Link$JaxbLink.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlAttribute via javax/ws/rs/core/Link$JaxbLink.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlElement via org/sonatype/ossindex/service/api/componentreport/ComponentReport.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlElement via org/sonatype/ossindex/service/api/componentreport/ComponentReportRequest.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlElement via org/sonatype/ossindex/service/api/componentreport/ComponentReportVulnerability.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlElementWrapper via org/sonatype/ossindex/service/api/componentreport/ComponentReport.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlElementWrapper via org/sonatype/ossindex/service/api/componentreport/ComponentReportRequest.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlRootElement via org/sonatype/ossindex/service/api/componentreport/ComponentReport.class
      Plugin rapid7-insightvm-container-assessment:1.0.21 using javax/xml/bind/annotation/XmlRootElement via org/sonatype/ossindex/service/api/componentreport/ComponentReportRequest.class

            rapid7 Rapid7 User
            basil Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: