The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, actions/setup-java@v3, github/codeql-action/upload-sarif@v2, advanced-security/maven-dependency-submission-action@571e99aab1055c2e71a1e2309b9691de18d6b7d6. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

Unexpected input(s) 'acs-report-enable', valid inputs are ['image', 'path', 'sbom', 'fail-build', 'output-format', 'severity-cutoff', 'only-fixed', 'add-cpes-if-none', 'by-cve', 'grype-version', 'vex']

Failed minimum severity level. Found vulnerabilities with level 'high' or higher

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, actions/setup-java@v3, github/codeql-action/upload-sarif@v2, docker/login-action@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

Submitting snapshot...

{ "detector": { "name": "maven-dependency-tree-action", "url": "https://github.com/advanced-security/maven-dependency-tree-action", "version": "1.1.0" }, "version": 0, "job": { "correlator": "build", "id": "10586798464" }, "sha": "77aa71fc90e6d30d72e95eee5d55bd9baa031a95", "ref": "refs/heads/main", "scanned": "2024-08-27T22:28:03.500Z", "manifests": { "catalog-service": { "resolved": { "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.3.3": { "package_url": "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.3.3", "relationship": "direct", "scope": "runtime", "dependencies": [ "pkg:maven/org.springframework.boot/spring-boot-starter@3.3.3", "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.3.3", "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.3.3", "pkg:maven/org.springframework/spring-web@6.1.12", "pkg:maven/org.springframework/spring-webmvc@6.1.12" ] }, "pkg:maven/org.springframework.boot/spring-boot-starter@3.3.3": { "package_url": "pkg:maven/org.springframework.boot/spring-boot-starter@3.3.3", "relationship": "indirect", "scope": "runtime", "dependencies": [ "pkg:maven/org.springframework.boot/spring-boot@3.3.3", "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.3.3", "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.3.3", "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1", "pkg:maven/org.yaml/snakeyaml@2.2" ] }, "pkg:maven/org.springframework.boot/spring-boot@3.3.3": { "package_url": "pkg:maven/org.springframework.boot/spring-boot@3.3.3", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.3.3": { "package_url": "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.3.3", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.3.3": { "package_url": "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.3.3", "relationship": "indirect", "scope": "runtime", "dependencies": [ "pkg:maven/ch.qos.logback/logback-classic@1.5.7", "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.23.1", "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16" ] }, "pkg:maven/ch.qos.logback/logback-classic@1.5.7": { "package_url": "pkg:maven/ch.qos.logback/logback-classic@1.5.7", "relationship": "indirect", "scope": "runtime", "dependencies": [ "pkg:maven/ch.qos.logback/logback-core@1.5.7" ] }, "pkg:maven/ch.qos.logback/logback-core@1.5.7": { "package_url": "pkg:maven/ch.qos.logback/logback-core@1.5.7", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.23.1": { "package_url": "pkg:maven/org.apache.logging.log