Merge pull request #77 from leanix/feature/CID-2786/fix-snyk-vulnerab…

…ilities CID-2786: fix Snyk vulnerabilities
leanix · Jul 10, 2024 · f9a75fe · f9a75fe
2 parents 297aa7b + ff5972a
commit f9a75fe
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -26,7 +26,7 @@ dependencies {
  implementation("org.jetbrains.kotlin:kotlin-stdlib-jdk8")
  implementation("org.reactivestreams:reactive-streams:1.0.4")
  implementation("com.expediagroup:graphql-kotlin-spring-client:7.0.2")
- implementation("org.cyclonedx:cyclonedx-core-java:8.0.3")
+ implementation("org.cyclonedx:cyclonedx-core-java:9.0.4")
  // Explicitly fetching transitive dependencies to avoid known vulnerabilities
  implementation("ch.qos.logback:logback-core:1.4.14")
  implementation("ch.qos.logback:logback-classic:1.4.14")

diff --git a/src/main/kotlin/net/leanix/vsm/sbomBooster/service/VsmDiscoveryService.kt b/src/main/kotlin/net/leanix/vsm/sbomBooster/service/VsmDiscoveryService.kt
@@ -3,7 +3,7 @@ package net.leanix.vsm.sbomBooster.service
 import net.leanix.vsm.sbomBooster.VsmSbomBoosterApplication
 import net.leanix.vsm.sbomBooster.configuration.PropertiesConfiguration
 import net.leanix.vsm.sbomBooster.domain.VsmDiscoveryItem
-import org.cyclonedx.BomParserFactory
+import org.cyclonedx.parsers.BomParserFactory
 import org.slf4j.Logger
 import org.slf4j.LoggerFactory
 import org.springframework.core.io.FileSystemResource

diff --git a/src/test/kotlin/net/leanix/vsm/sbomBooster/service/VsmDiscoveryServiceTests.kt b/src/test/kotlin/net/leanix/vsm/sbomBooster/service/VsmDiscoveryServiceTests.kt
@@ -6,9 +6,9 @@ import io.mockk.mockkStatic
 import io.mockk.verify
 import net.leanix.vsm.sbomBooster.configuration.PropertiesConfiguration
 import net.leanix.vsm.sbomBooster.domain.VsmDiscoveryItem
-import org.cyclonedx.BomParserFactory
 import org.cyclonedx.model.Bom
 import org.cyclonedx.model.Component
+import org.cyclonedx.parsers.BomParserFactory
 import org.cyclonedx.parsers.Parser
 import org.junit.jupiter.api.BeforeEach
 import org.junit.jupiter.api.Test