Forced ktlint to use logback-core:1.2.13, and logback-classic:1.2.13 …

…to address CVE. (#602) Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
opensearch-project · Feb 29, 2024 · f650858 · f650858
1 parent 68312c6
commit f650858
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -78,7 +78,12 @@ dependencies {
     testImplementation "com.nhaarman.mockitokotlin2:mockito-kotlin:2.2.0"
     testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.7.2'
 
-    ktlint "com.pinterest:ktlint:0.45.1"
+    add("ktlint", "com.pinterest:ktlint:0.45.1") {
+        exclude group: "ch.qos.logback", module: "logback-classic"
+        exclude group: "ch.qos.logback", module: "logback-core"
+    }
+    add("ktlint", "ch.qos.logback:logback-core:1.2.13")
+    add("ktlint", "ch.qos.logback:logback-classic:1.2.13")
 }
 
 test {