Koji Noguchi created PIG-5462:
---------------------------------
Summary: Update Owasp version to latest (10.0.3)
Key: PIG-5462
URL: https://issues.apache.org/jira/browse/PIG-5462
Project: Pig
Issue Type: Test
Reporter: Koji Noguchi
Assignee: Koji Noguchi
While looking at owasp report, a lot of them were completely off.
(Like hadoop-shims-0.10.3 being reported as vulnerable.)
Using latest org.owasp/dependency-check-ant
(https://mvnrepository.com/artifact/org.owasp/dependency-check-ant)
seems to help cut down the false positives.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
