Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-8709

License Check Resolved to Wrong Dependency

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Resolution: Duplicate
    • Affects Version/s: 4.2.2
    • Fix Version/s: None
    • Component/s: License Control
    • Labels:
      None
    • Severity:
      High

      Description

      We are building a maven project with a dependency to commons-io:commons-io:1.4 which is available and resolves correctly at build time.. When the build info is viewed in artifactory it is linking the dependency to our local cached copy of another artifact with a different GAV ID
      http://bits.netbeans.org/nexus/content/groups/netbeans/org/netbeans/external/commons-io-1.4/RELEASE701/commons-io-1.4-RELEASE701.jar

      I believe this is happening because the netbeans Jar contain the original maven pom file internally and artifactory licence control is taking that information as a match.

      This means our 3rd partty audit documentation which we take from artifacfory is inaccurate, please review and resolve.

        Attachments

          Issue Links

            Activity

                People

                Assignee:
                nadavy Nadav Yogev
                Reporter:
                marshac Craig Marshall (Inactive)
                Votes:
                2 Vote for this issue
                Watchers:
                3 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: