dd-trace-java icon indicating copy to clipboard operation
dd-trace-java copied to clipboard

Test IastOverheadControlSpringBootSmokeTest.'Test that all the vulnerabilities are detected' is flaky

Open AlexeyKuznetsov-DD opened this issue 6 months ago • 0 comments

Tracer Version(s)

1.52.1

Java Version(s)

11

JVM Vendor

Oracle JDK

Bug Report

Condition failed with Exception:

hasVulnerability { vul -> vul.type == 'WEAK_HASH' && vul.location.method == 'multipleVulns' && vul.evidence.value == 'SHA1' }
|
java.lang.AssertionError: No matching vulnerability found. Vulnerabilities found: [
    {
        "evidence": {
            "value": "SHA1"
        },
        "hash": 1972954159,
        "location": {
            "line": 54,
            "method": "multipleVulns2",
            "path": "datadog.smoketest.springboot.controller.IastSamplingController",
            "spanId": 4999927944762673122,
            "stackId": "1"
        },
        "type": "WEAK_HASH"
    },

Expected Behavior

Test should pass always

Reproduction Code

No response

AlexeyKuznetsov-DD avatar Aug 25 '25 12:08 AlexeyKuznetsov-DD