Task get stuck because of transitive dependencies about gradle-dep-tree

[asafgabai]

@gregoryboue The issue was reproduced. The team is working on fixing it.

[asafgabai]

Hi @gregoryboue, thanks for reporting this! I couldn't replicate the issue, but in past versions of gradle-dep-tree, we encountered similar problems. If you're using our provided init.gradle, I suggest updating it with the following line to make sure you use the latest version:

        classpath 'com.jfrog:gradle-dep-tree:3.0.1'

Feel free to let me know if this resolves the issue or if you need further assistance.

[gregoryboue]

Hi @asafgabai ,

Thanks for the answer, i can confirm that it's ok with 3.0.1 and KO with 3.0.0, i will wait that 3.0.1 version to be embed in jfrog-cli-core because currently jf audit doesn't work for my project

[asafgabai]

@gregoryboue Great! it was upgraded to 3.0.1 in this pull request and will be released soon.

[gregoryboue]

Hi,

The JFrog CLI 2.52.0 with gradle-dep-tree 3.0.1 has been released today, with my sample project, i still have problem with jf audit --gradle command :

jf audit --gradle
[Debug] JFrog CLI version: 2.52.0
[Debug] OS/Arch: linux/amd64
[Debug] Sending HTTP GET request to: https://myartifactory/xray/api/v1/system/version
[Debug] Usage Report: Sending info...
[Debug] Sending HTTP GET request to: https://myartifactory/artifactory/api/system/version
[Debug] Artifactory response: 200 OK
[Debug] JFrog Artifactory version is: 7.55.10
[Debug] Sending HTTP POST request to: https://myartifactory/artifactory/api/system/usage
[Debug] Sending HTTP GET request to: https://myartifactory/xray/api/v1/entitlements/feature/contextual_analysis
[Debug] The path '/home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE/.gitignore' is excluded
[Debug] mapped 1 working directories with indicators/descriptors:
 {
   "/home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE": [
     "/home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE/build.gradle"
   ]
 }
[Debug] Detected 1 technologies at /home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE: [gradle].
[Info] Preforming 1 SCA scans:
[
   {
     "Technology": "gradle",
     "WorkingDirectory": "/home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE",
     "Descriptors": [
       "/home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE/build.gradle"
     ]
   }
]
[Info] Running SCA scan for gradle vulnerable dependencies in /home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE directory...
[Info] Calculating Gradle dependencies...
[Debug] Using resolver config from /home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE/.jfrog/projects/gradle.yaml
[Debug] Preparing to read the config file /home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE/.jfrog/projects/gradle.yaml
[Debug] Found resolver in the config file /home/jenkins/agent/workspace/groupeeul-dosn/02608/tnr/TEMPLATE_ANDROID_SNAPSHOT_TU_GBE/.jfrog/projects/gradle.yaml
[Debug] JFROG_CLI_RELEASES_REPO is not set
[Debug] The project dependencies will be resolved from https://myartifactory/artifactory/ from the maven_02608 repository
[Info] Running gradle deps tree command: ./gradlew clean generateDepTrees -I /tmp/jfrog.cli.temp.-1701724567-540383840/gradledeptree.init -q -Dcom.jfrog.depsTreeOutputFile=/tmp/jfrog.cli.temp.-1701724567-540383840/gradledeptree.out -Dcom.jfrog.includeAllBuildFiles=true
Killed

The exit code is 137.
When i just run generateDepTrees command with custom init.gradle to use gradle-dep-tree 3.0.1 it works.

[gregoryboue]

@asafgabai Did you reproduce the behaviour with jfrog CLI 2.52.0 ?

[gregoryboue]

thanks for the answer

[eranturgeman]

Hello @gregoryboue,

I wanted to give you an update on our progress.
The concerns surrounding gradle-dep-tree have already been resolved.
Regarding 'jf audit' with Gradle, I've recently opened a PR to begin addressing this specific issue. I'll ensure to keep you updated on any developments or future updates.

[gregoryboue]

Thanks you a lot @eranturgeman

[eranturgeman]

Hello @gregoryboue!
I'm pleased to share that the bug fix has been released!
I'll keep this issue page open for a while longer, so please don't hesitate to respond here if you encounter any additional issues. If the fix resolves your problem, your feedback confirming its success would be greatly appreciated.

[gregoryboue]

I can confirm this issue was fixed