@@ -28,7 +28,6 @@ job=$(basename ${KOKORO_JOB_NAME})
 echo "coercing sponge logs..."
 for xml in `find . -name *-sponge_log.xml`
 do
-echo "processing ${xml}"
 class=$(basename ${xml} | cut -d- -f2)
 dir=$(dirname ${xml})/${job}/${class}
 text=$(dirname ${xml})/${class}-sponge_log.txt

@@ -14,6 +14,7 @@
 # limitations under the License.
 
 set -eo pipefail
+shopt -s nullglob
 
 ## Get the directory of the build script
 scriptDir=$(realpath $(dirname "${BASH_SOURCE[0]}"))
@@ -46,7 +47,7 @@ function completenessCheck() {
 # This is stripped from the output as it is not present in the flattened pom.
 # Only dependencies with 'compile' or 'runtime' scope are included from original dependency list.
 msg "Generating dependency list using original pom..."
-mvn dependency:list -f pom.xml -DincludeScope=runtime -Dsort=true | grep '\[INFO] .*:.*:.*:.*:.*' | sed -e s/\\s--\\smodule.*// >.org-list.txt
+mvn dependency:list -f pom.xml -DincludeScope=runtime -Dsort=true | grep '\[INFO] .*:.*:.*:.*:.*' | sed -e 's/ --.*//' >.org-list.txt
 
 # Output dep list generated using the flattened pom (only 'compile' and 'runtime' scopes)
 msg "Generating dependency list using flattened pom..."
@@ -70,7 +71,7 @@ function completenessCheck() {
 set +e
 
 error_count=0
-for path in $(find -name ".flattened-pom.xml")
+for path in **/.flattened-pom.xml
 do
 # Check flattened pom in each dir that contains it for completeness
 dir=$(dirname "$path")

@@ -4,14 +4,14 @@
 "git": {
 "name": ".",
 "remote": "https://.com/googleapis/java-core.git",
-"sha": "4195293bd698c0c3a5e5cb80b068354877f7ce9f"
+"sha": "9f26800e9c531ba0b4f9f9bde0786f72ef14c0df"
 }
 },
 {
 "git": {
 "name": "synthtool",
 "remote": "https://.com/googleapis/synthtool.git",
-"sha": "8eae0234a16b26c2ff616d305dbd9786c8b10a47"
+"sha": "87254ac89a9559864c0a245d6b150406439ce3d8"
 }
 }
 ],
@@ -81,6 +81,7 @@
 "CODE_OF_CONDUCT.md",
 "CONTRIBUTING.md",
 "LICENSE",
+"SECURITY.md",
 "codecov.yaml",
 "java.header",
 "license-checks.xml",