force resolve logback deps to mitigate CVE-2023-6378

Signed-off-by: Rohit Ashiwal <rashiwal@amazon.com>
opensearch-project · Mar 5, 2024 · 868f615 · 868f615
1 parent 5c77be0
commit 868f615
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -175,6 +175,10 @@ dependencies {
             attribute(Bundling.BUNDLING_ATTRIBUTE, objects.named(Bundling, Bundling.EXTERNAL))
         }
     }
+    configurations.ktlint {
+        resolutionStrategy.force "ch.qos.logback:logback-core:1.2.13"
+        resolutionStrategy.force "ch.qos.logback:logback-classic:1.2.13"
+    }
 }
 
 repositories {