NO-JIRA exclude log4j 1.x from apacheds-server-integ to kill the noise about CVE...

diff --git a/sonar-testing-ldap/build.gradle b/sonar-testing-ldap/build.gradle
index bd0d8026b1bc08f309189f6194b74b4f86091309..d8c19eccf0de5bdbe86ba60afbc7c8e73f931cda 100644 (file)
--- a/sonar-testing-ldap/build.gradle
+++ b/sonar-testing-ldap/build.gradle
@@ -6,7 +6,9 @@ sonar {
 
 dependencies {
     api 'org.apache.mina:mina-core:2.2.1'
-    implementation 'org.apache.directory.server:apacheds-server-integ:2.0.0.AM26'
+    implementation ('org.apache.directory.server:apacheds-server-integ:2.0.0.AM26') {
+        exclude group: 'log4j', module: 'log4j'
+    }
 
     testImplementation 'junit:junit'
     testImplementation 'org.assertj:assertj-core'