Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-77999

Jira 10 displays incorrect "modified files" during startup

XMLWordPrintable

      Issue Summary

      The Helium 2 baseline hashes shipped with Jira 10 contain Node/Yarn lock files (package-lock.json and yarn.lock). This is causing the Modz Detector component to flag these as modified files, even on a fresh Jira 10 installation. These hashes were not listed in hash-registry.properties in Jira 9.

      This negates the benefits of Helium 2 and makes it more difficult for admins/support to identify modifications to the Jira installation.

      Steps to Reproduce

      1. Install Jira Core 10.0.0 (fresh installation).
      2. Start Jira and wait for the process to complete.

      Expected Results

      The post-startup modifications report lists no files.

      Actual Results

      The following appears in the atlassian-jira.log:

      2024-08-22 16:37:41,237-0000 Modification Check:thread-1 INFO      [c.a.jira.startup.JiraStartupLogger] 
    
    ___ Modifications ___________________________
    
         Modified Files                                : META-INF/fe-module-manifests/atlassian-whisper-plugin-7.0.4-jar/META-INF/fe-module-manifests/hermes/package-lock.json, META-INF/fe-module-manifests/jira-plugin-2.0.5-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jira-project-creation-6.0.1-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/atlassian-whitelist-ui-plugin-6.1.1-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/atlassian-gadgets-directory-plugin-9.0.3-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/analytics-client-9.0.6-jar/META-INF/fe-module-manifests/src/main/resources/js/programmatic/package-lock.json, META-INF/fe-module-manifests/batching-plugin-4.0.1-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/rate-limiting-plugin-3.0.4-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jslibs-6.0.0-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/atlassian-clientside-extensions-runtime-3.0.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-admin-quicksearch-jira-3.0.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/cleanup-hub-plugin-3.0.3-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/oauth2-provider-plugin-4.0.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/analytics-client-9.0.6-jar/META-INF/fe-module-manifests/event-checklist/package-lock.json, META-INF/fe-module-manifests/atlassian-diagnostics-plugin-4.0.4-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/soy-template-plugin-7.0.4-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/atlassian-gadgets-opensocial-plugin-9.0.3-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-gadgets-publisher-plugin-9.0.3-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jira-tzdetect-plugin-5.0.0-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/upm-application-plugin-7.0.14-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/applinks-plugin-10.0.15-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/jira-dnd-attachment-plugin-7.0.5-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-audit-plugin-2.0.2-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jira-mobile-rest-5.0.1-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/cluster-monitoring-plugin-5.0.3-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/oauth2-client-plugin-4.0.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/static-assets-url-4.0.2-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-gadgets-dashboard-plugin-9.0.3-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-lighthouse-plugin-1.0.8-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jira-admin-helper-plugin-7.0.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-whisper-plugin-7.0.4-jar/META-INF/fe-module-manifests/plugin/package-lock.json, META-INF/fe-module-manifests/atlassian-universal-plugin-manager-plugin-7.0.14-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/dc-browser-metrics-plugin-10.3.5-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-plugins-webresource-rest-7.1.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-authentication-plugin-5.0.5-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jquery-2.2.4.15-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/jira-user-profile-plugin-6.0.0-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/atlassian-plugins-webresource-plugin-7.1.1-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/jira-quicksearch-plugin-10.0.0-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/core-plugin-3.0.4-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-oauth-service-provider-plugin-6.0.3-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/atlassian-nav-links-plugin-9.0.3-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/jira-importers-plugin-14.0.4-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/atlassian-gadgets-embedded-plugin-9.0.3-jar/META-INF/fe-module-manifests/yarn.lock, META-INF/fe-module-manifests/soycompiler-20140422.26-atlassian-3-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/activeobjects-plugin-6.0.1-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/analytics-client-9.0.6-jar/META-INF/fe-module-manifests/package-lock.json, META-INF/fe-module-manifests/jira-mail-plugin-19.0.2-jar/META-INF/fe-module-manifests/package-lock.json
         Removed Files                                 : None

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available.

              mgirazovski Mladen Girazovski
              1353e2e9fd2f Benjamin S
              Votes:
              1 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: