[GitHub] [pinot] snleee opened a new issue, #10040: Fix the Trivy test for `pinot-orc`

[GitBox <gi...@apache.org>]

snleee opened a new issue, #10040:
URL: https://github.com/apache/pinot/issues/10040

   https://github.com/apache/pinot/pull/10037/checks?check_run_id=10316587317
   
   It looks that the existing pinot-orc package has some library dependency that contains some security concern. We should check the dependency graph and check if the version bump would fix the issue.
   
   ```
   net.minidev:json-smart
   org.apache.hadoop:hadoop-common
   com.fasterxml.woodstox:woodstox-core
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org