{"action":"created","issue":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/1267","repository_url":"https://api.github.com/repos/jeremylong/DependencyCheck","labels_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/1267/labels{/name}","comments_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/1267/comments","events_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/1267/events","html_url":"https://github.com/jeremylong/DependencyCheck/issues/1267","id":320800932,"number":1267,"title":"Invalid signature file digest for Manifest main attributes","user":{"login":"githubhs17","id":31347414,"avatar_url":"https://avatars0.githubusercontent.com/u/31347414?v=4","gravatar_id":"","url":"https://api.github.com/users/githubhs17","html_url":"https://github.com/githubhs17","followers_url":"https://api.github.com/users/githubhs17/followers","following_url":"https://api.github.com/users/githubhs17/following{/other_user}","gists_url":"https://api.github.com/users/githubhs17/gists{/gist_id}","starred_url":"https://api.github.com/users/githubhs17/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/githubhs17/subscriptions","organizations_url":"https://api.github.com/users/githubhs17/orgs","repos_url":"https://api.github.com/users/githubhs17/repos","events_url":"https://api.github.com/users/githubhs17/events{/privacy}","received_events_url":"https://api.github.com/users/githubhs17/received_events","type":"User","site_admin":false},"labels":[{"id":168886085,"url":"https://api.github.com/repos/jeremylong/DependencyCheck/labels/pending%20more%20information","name":"pending more information","color":"fbca04","default":false},{"id":13090912,"url":"https://api.github.com/repos/jeremylong/DependencyCheck/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-05-07T13:17:11Z","updated_at":"2018-05-08T11:55:23Z","closed_at":null,"author_association":"NONE","body":"We are using zookeeper-3.4.10.tar.gz (https://archive.apache.org/dist/zookeeper/zookeeper-3.4.10/zookeeper-3.4.10.tar.gz) in our project. When running the scan we got following error\r\n\r\n04:56:41 [INFO] Finished Archive Analyzer (3 seconds)\r\n04:56:41 [INFO] Finished File Name Analyzer (0 seconds)\r\n04:56:43 [WARN] An unexpected error occurred during analysis of '/home/jenkins-master/workspace/build-pipeline-ocscli.scan/dependentImages/prod-search-mesos-framework-zookeeper/contrib/fatjar/zookeeper-3.4.10-fatjar.jar' (Jar Analyzer): Invalid signature file digest for Manifest main attributes\r\n04:56:44 [INFO] Finished Jar Analyzer (3 seconds)\r\n04:56:58 [INFO] Finished Central Analyzer (13 seconds)\r\n04:56:58 [INFO] Finished Assembly Analyzer (0 seconds)\r\n04:56:58 [INFO] Finished Dependency Merging Analyzer (0 seconds)\r\n04:56:58 [INFO] Finished Version Filter Analyzer (0 seconds)\r\n04:56:59 [INFO] Finished Hint Analyzer (0 seconds)\r\n04:57:00 [INFO] Created CPE Index (1 seconds)\r\n04:57:00 [INFO] Skipping CPE Analysis for npm\r\n04:57:03 [INFO] Finished CPE Analyzer (4 seconds)\r\n04:57:03 [INFO] Finished False Positive Analyzer (0 seconds)\r\n04:57:03 [INFO] Finished NVD CVE Analyzer (0 seconds)\r\n04:57:03 [INFO] Finished Vulnerability Suppression Analyzer (0 seconds)\r\n04:57:03 [INFO] Finished Dependency Bundling Analyzer (0 seconds)\r\n04:57:04 [INFO] Analysis Complete (26 seconds)\r\n04:57:05 [ERROR] Invalid signature file digest for Manifest main attributes"},"comment":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/comments/387378103","html_url":"https://github.com/jeremylong/DependencyCheck/issues/1267#issuecomment-387378103","issue_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/1267","id":387378103,"user":{"login":"githubhs17","id":31347414,"avatar_url":"https://avatars0.githubusercontent.com/u/31347414?v=4","gravatar_id":"","url":"https://api.github.com/users/githubhs17","html_url":"https://github.com/githubhs17","followers_url":"https://api.github.com/users/githubhs17/followers","following_url":"https://api.github.com/users/githubhs17/following{/other_user}","gists_url":"https://api.github.com/users/githubhs17/gists{/gist_id}","starred_url":"https://api.github.com/users/githubhs17/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/githubhs17/subscriptions","organizations_url":"https://api.github.com/users/githubhs17/orgs","repos_url":"https://api.github.com/users/githubhs17/repos","events_url":"https://api.github.com/users/githubhs17/events{/privacy}","received_events_url":"https://api.github.com/users/githubhs17/received_events","type":"User","site_admin":false},"created_at":"2018-05-08T11:55:23Z","updated_at":"2018-05-08T11:55:23Z","author_association":"NONE","body":"Jeremy, thanks for your fast investigation.\r\nWe use this directly from apache.org, we don't build this. You can find the `zookeeper-3.4.10-fatjar.jar` in the referenced zookeeper archive in directory zookeeper-3.4.10.tar`/zookeeper-3.4.10/contrib/fatjar`"}}
{"actor":{"display_login":"githubhs17"}}