GitLab 由於不支持 class 文件主要版本 61，gemnasium-maven 分析器 v3.11.1 依賴項掃描失敗

Question

我正在嘗試為我的自托管 GitLab 服務器中的存儲庫設置 GitLab 依賴項掃描。 我已經包含了作業模板和測試階段，因為我已經覆蓋了階段子句。 工作開始了，但很快就失敗了。 當我將變量SECURE_LOG_LEVEL設置為debug時，我看到以下 output。

$ /analyzer run
Using java version 'adoptopenjdk-17.0.2+8'
[INFO] [gemnasium-maven] [2023-01-28T15:21:00Z] [/go/src/app/cmd/gemnasium-maven/main.go:55] ▶ GitLab gemnasium-maven analyzer v3.11.1
[DEBU] [gemnasium-maven] [2023-01-28T15:21:00Z] [/go/src/app/finder/finder.go:64] ▶ inspect directory: .
[DEBU] [gemnasium-maven] [2023-01-28T15:21:00Z] [/go/src/app/finder/finder.go:96] ▶ skip ignored directory: .git
[DEBU] [gemnasium-maven] [2023-01-28T15:21:00Z] [/go/src/app/finder/detect.go:84] ▶ Selecting gradle for maven because this is the first match
[INFO] [gemnasium-maven] [2023-01-28T15:21:00Z] [/go/src/app/finder/finder.go:116] ▶ Detected supported dependency files in '.'. Dependency files detected in this directory will be processed. Dependency files in other directories will be skipped.
[DEBU] [gemnasium-maven] [2023-01-28T15:21:00Z] [/go/src/app/cmd/gemnasium-maven/main.go:234] ▶ Exporting dependencies for /path/to/my/app/build.gradle
[DEBU] [gemnasium-maven] [2023-01-28T15:21:05Z] [/go/src/app/builder/gradle/gradle.go:85] ▶ /path/to/my/app/gradlew --init-script /gemnasium-gradle-plugin-init.gradle gemnasiumDumpDependencies
Downloading https://services.gradle.org/distributions/gradle-7.1.1-bin.zip
..........10%...........20%...........30%..........40%...........50%...........60%..........70%...........80%...........90%...........100%
Welcome to Gradle 7.1.1!
Here are the highlights of this release:

- Faster incremental Java compilation
- Easier source set configuration in the Kotlin DSL
  For more details see https://docs.gradle.org/7.1.1/release-notes.html
  Starting a Gradle Daemon (subsequent builds will be faster)
  FAILURE: Build failed with an exception.

* Where:
  Initialization script '/gemnasium-gradle-plugin-init.gradle'
* What went wrong:
  Could not compile initialization script '/gemnasium-gradle-plugin-init.gradle'.

  > startup failed:
  > General error during conversion: Unsupported class file major version 61

  java.lang.IllegalArgumentException: Unsupported class file major version 61
  at groovyjarjarasm.asm.ClassReader.<init>(ClassReader.java:189)
  at groovyjarjarasm.asm.ClassReader.<init>(ClassReader.java:170)
  at groovyjarjarasm.asm.ClassReader.<init>(ClassReader.java:156)
  at groovyjarjarasm.asm.ClassReader.<init>(ClassReader.java:277)
  ...

我該如何解決這個問題？ 我正在使用 GitLab 服務器 v15.7.5。

Answer 1

我發現了一個與我遇到的問題非常相似的StackOverflow 線程。

似乎與 GitLab gemnasium-maven 分析器 v3.11 捆綁在一起的ASM版本不支持 class 文件版本 61 in Java v17.0.2+8。

我能夠通過將 GitLab gemnasium-maven 分析器降級到 v2.31.0 來實現此功能，並已向 GitLab 提交支持請求以通知他們該問題。

要降級依賴掃描器，請將以下代碼塊添加到您的 CICD 模板

.ds-analyzer:
  variables:
    DS_MAJOR_VERSION: 2