fix: Add support for Java 8 date/time types

FortifyVulnerabilityExporter-plugin-to-json/build.gradle

@@ -14,4 +14,7 @@ dependencies {
 	compileOnly 'com.fasterxml.jackson.core:jackson-core'
 	compileOnly 'com.fasterxml.jackson.core:jackson-databind'
 	compileOnly 'commons-collections:commons-collections'
+    // Required for Java 8 date/time handling
+    compileOnly 'com.fasterxml.jackson.datatype:jackson-datatype-jdk8'
+    compileOnly 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310'
 }

FortifyVulnerabilityExporter-plugin-to-json/src/main/java/com/fortify/vulnexport/to/json/vuln/formatter/JsonFormatter.java

@@ -34,6 +34,7 @@
 
 import com.fasterxml.jackson.core.JsonGenerator;
 import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule;
 import com.fortify.util.rest.json.JSONMap;
 import com.fortify.util.spring.expression.ExpressionMapToJSONMapEvaluator;
 import com.fortify.util.spring.expression.TemplateExpressionMap;
@@ -49,7 +50,7 @@
  *
  */
 public class JsonFormatter implements Consumer<IVulnerabilityAccessor> {
-	private static final ObjectMapper MAPPER = new ObjectMapper();
+	private static final ObjectMapper MAPPER = createObjectMapper();
 	private final JsonFormatterConfig formatterConfig;
 	private final Map<String, VulnerabilityMapper> vulnerabilityMappers;
 	private final Map<String, JSONMap> contextObjects;
@@ -154,6 +155,12 @@ private Map<String, Object> createEvaluationInput() {
 		return result;
 	}
 
+	private static final ObjectMapper createObjectMapper() {
+	    ObjectMapper objectMapper = new ObjectMapper();
+	    objectMapper.registerModule(new JavaTimeModule());
+	    return objectMapper;
+	}
+
 	private static final int size(Map<?, ?> map) {
 		return map==null ? 0 : map.size();
 	}

build.gradle

@@ -87,6 +87,9 @@ allprojects {
 			// Spring Boot version is compatible with snakeyaml 2.0, which doesn't have 
 			// any known vulnerabilities, so we override the version here.
 			implementation 'org.yaml:snakeyaml:2.0'
+            // Required for Java 8 date/time handling
+            implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jdk8'
+            implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310'
 		}
 	}
 }