dependency-check-gradle icon indicating copy to clipboard operation
dependency-check-gradle copied to clipboard

Build never finishes with AGP 8.3

Open otbutz opened this issue 1 year ago • 1 comments

We updated our Android project to use the newer version of the Android Gradle Plugin(8.3.1) paired with a Gradle update from 8.2 to 8.4. This seems to break even the most current version of the dependency check plugin, resulting in a build that never completes.

allprojects {
    apply(plugin = "org.owasp.dependencycheck")

    configure<org.owasp.dependencycheck.gradle.extension.DependencyCheckExtension> {
        format = org.owasp.dependencycheck.reporting.ReportGenerator.Format.ALL.toString()
        nvd.apiKey = "xxxxxxxxxxxxxxxxxxxxxxxx"
        suppressionFile = "$rootDir/owasp-suppressions.xml"
        analyzers.apply {
            archiveEnabled = false
            assemblyEnabled = false
            knownExploitedEnabled = false
            nodeAudit.enabled = false
            nodePackage.enabled = false
            retirejs.enabled = false
        }
    }
}
./gradlew dependencyCheckAggregate
 > Task :dependencyCheckAggregate
 Verifying dependencies for project Android-Opti4Driver
 
 > Task :opticom:dependencyCheckAggregate
 Verifying dependencies for project opticom
 
 > Task :core:common:dependencyCheckAggregate
 Verifying dependencies for project common
 
 > Task :app:dependencyCheckAggregate
 Verifying dependencies for project app
 
 > Task :domain:dependencyCheckAggregate
 Verifying dependencies for project domain
 
 > Task :core:dependencyCheckAggregate
 Verifying dependencies for project core
 
 > Task :feature:dependencyCheckAggregate
 Verifying dependencies for project feature
 
 > Task :feature:after-order:dependencyCheckAggregate
 Verifying dependencies for project after-order

otbutz avatar Apr 05 '24 11:04 otbutz

Any update on this issue? I am facing the same problem with Gradle 8.7.0

guilhermeborgesbastos avatar Jun 03 '24 12:06 guilhermeborgesbastos