[
https://issues.apache.org/jira/browse/PIG-5462?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Koji Noguchi updated PIG-5462:
------------------------------
Attachment: pig-5462-v01.patch
> Update Owasp version to latest (10.0.3)
> ----------------------------------------
>
> Key: PIG-5462
> URL: https://issues.apache.org/jira/browse/PIG-5462
> Project: Pig
> Issue Type: Test
> Reporter: Koji Noguchi
> Assignee: Koji Noguchi
> Priority: Trivial
> Attachments: pig-5462-v01.patch
>
>
> While looking at owasp report, a lot of them were completely off.
> (Like hadoop-shims-0.10.3 being reported as vulnerable.)
> Using latest org.owasp/dependency-check-ant
> (https://mvnrepository.com/artifact/org.owasp/dependency-check-ant)
> seems to help cut down the false positives.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
