Building for the Splunk Platform

How to fix AppInspect check_for_vulnerable_javascript_library_usage from Add-on Builder content?

sloshburch
Splunk Employee
Splunk Employee

Some of my apps are failing AppInspect's check_for_vulnerable_javascript_library_usage check but I didn't include any javascript. I did built the apps with the Splunk Add-on Builder and I see some javascript that was packaged as a result.

Is there a fix for this?

Labels (2)
0 Karma
1 Solution

sloshburch
Splunk Employee
Splunk Employee

There is a fix!

The Version 4.1.0 Release Notes show that these items were fixed! The way to update your app is a bit nuanced. You'll need to:

  1. Export the app from any Add-on Builder
  2. Import the app into Add-on Builder v4.1.0 or newer
  3. Download the app packaged from Add-on Builder v4.1.0 or newer

The resulting app package that you download will have the fix!

You can validated by running the old app package against AppInspect with the `cloud` tag, then run the fixed app package against AppInspect with the `cloud`. See Send requests using the Splunk AppInspect collection for Postman  on splunk>dev for more guidance.

View solution in original post

sloshburch
Splunk Employee
Splunk Employee

There is a fix!

The Version 4.1.0 Release Notes show that these items were fixed! The way to update your app is a bit nuanced. You'll need to:

  1. Export the app from any Add-on Builder
  2. Import the app into Add-on Builder v4.1.0 or newer
  3. Download the app packaged from Add-on Builder v4.1.0 or newer

The resulting app package that you download will have the fix!

You can validated by running the old app package against AppInspect with the `cloud` tag, then run the fixed app package against AppInspect with the `cloud`. See Send requests using the Splunk AppInspect collection for Postman  on splunk>dev for more guidance.

mikedgibson
New Member

I inherited the maintenance of an app that was built with a version of add-on builder that is triggering this warning. Unfortunately, I do not have access to an export of this app from add-on builder. Is there a way for me to make this change without an export then import?

0 Karma
Get Updates on the Splunk Community!

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Want a chance to win $500 to the Splunk shop? Take our IT Incident Management Survey!

  Top Trends & Best Practices in Incident ManagementSplunk is partnering up with Constellation Research to ...