force resolve logback deps to mitigate CVE-2023-6378 (#1125)

opensearch-project · Mar 5, 2024 · b916868 · b916868
1 parent 5c77be0
commit b916868
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -175,6 +175,10 @@ dependencies {
             attribute(Bundling.BUNDLING_ATTRIBUTE, objects.named(Bundling, Bundling.EXTERNAL))
         }
     }
+    configurations.ktlint {
+        resolutionStrategy.force "ch.qos.logback:logback-core:1.2.13"
+        resolutionStrategy.force "ch.qos.logback:logback-classic:1.2.13"
+    }
 }
 
 repositories {