Yahav Itschak

Update bouncycastle to 1.69

2

`bouncycastle` 1.64 is vulnerable. Let's upgrade it to the latest version, 1.69. Example vulnerability: https://www.cvedetails.com/cve/CVE-2020-15522/

Please include a summary of the change and which issue is fixed. Fixes # (issue number) **Type of change**: - [x] Bug fix (non-breaking change which fixes an issue) -...

**Describe the bug** In some cases a Gradle dependency ID is wrong. For example: `org.apache.commons:commons-lang3:3.8.1:3.12.0` **To Reproduce** Run a scan on the [build-info](https://github.com/jfrog/build-info) project and search for commons-lang3. **Expected behavior**...

**Is your feature request related to a problem? Please describe.** Currently, there is no convenient way to show violated licenses. The red components' behavior should be replaced with something else....

**Is your feature request related to a problem? Please describe.** Frogbot does not support Air-Gapped environments. **Describe the solution you'd like to see** Allow downloading Frogbot, extractors, and project dependencies...

**Is your feature request related to a problem? Please describe.** We can only select if we want an item to appear in the dependency tree. The filter works by inclusion...

Can't generate coverage for a package

1

I'm trying to see test coverage for [github.com/jfrog/froggit-go](https://github.com/jfrog/froggit-go), but I'm getting an error:  Here is the link to the report: https://gocover.io/github.com/jfrog/froggit-go The package is available in pkg.go.dev: https://pkg.go.dev/github.com/jfrog/froggit-go Thanks!

Started time does not comply the schema

1

**Describe the bug** It looks like the start time, for example: `2022-02-24T08:12:20.013+0200` does not comply the pattern of `^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}.\\d{3}(Z|[+-]\\d{4})$`. **To Reproduce** Generate build-info and validate schema. **Expected behavior** Build info...

### Describe the bug In the CreateUploadAsZipFunc, there are a couple of display and efficiency issues. ### Current behavior 1. While uploading a directory with the `--archive=zip` flag, the progress...

Frogbot: Update to 2.21.2

1

## Pre-requisites - [x] Prior to submitting a new workflow, please apply to join the GitHub Technology Partner Program: [partner.github.com/apply](https://partner.github.com/apply?partnershipType=Technology+Partner). --- ### **Please note that at this time we are...