Abhishek Singh Rajput

Results 7 comments of Abhishek Singh Rajput

Temporarily suppresses dependency vulnerabilities as 5.3.20 is the latest version available with spring boot 2.70.

https://www.checkov.io/ seems to be a good candidate it's licensed under apache so free to use.

Checkov has been added to the pipeline. ToDo: Update the document to add info about the usage of tooling.

I was also getting `java.lang.NoClassDefFoundError: javax/servlet/DispatcherType` error after bumping spring-boot and java. **But I can confirm it works with the below versions:** :smiley: :smiley: **Wiremock - 3.0.0-beta-4 Java - 17...

We have to suppress warning for Spring & Snakeyaml related vulnerabilities until we upgrade to Java 17 & Springboot 3.0. https://github.com/spring-projects/spring-boot/issues/34405

We have upgraded to java 17 & Springboot 3.0.5 hence except for spring fox /swagger all other dependency vulnerabilities are fixed.

All the vulnerabilities are fixed hence closing this Issue.