oss index audit

micronaut-projects · Jan 9, 2025 · 2faaf68 · 2faaf68
1 parent a4cd0b4
commit 2faaf68
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 2 deletions.
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
@@ -31,7 +31,7 @@ jobs:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       OSS_INDEX_USERNAME: ${{ secrets.OSS_INDEX_USERNAME }}
-      OSS_INDEX_PASSWORD: ${{ secrets.OSS_INDEX_PASSWORD }}      
+      OSS_INDEX_PASSWORD: ${{ secrets.OSS_INDEX_PASSWORD }}
     steps:
        # https://github.com/actions/virtual-environments/issues/709
       - name: "🗑 Free disk space"
@@ -63,7 +63,7 @@ jobs:
       - name: "🚔 Sonatype Scan"
         id: sonatypescan
         run: |
-          ./gradlew ossIndexAudit --no-parallel
+          ./gradlew ossIndexAudit --no-parallel --info
 
       - name: "🛠 Build with Gradle"
         id: gradle

diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
@@ -6,3 +6,7 @@ repositories {
     gradlePluginPortal()
     mavenCentral()
 }
+
+dependencies {
+    implementation(libs.sonatype.scan)
+}
diff --git a/buildSrc/src/main/groovy/io.micronaut.build.internal.groovy-module.gradle b/buildSrc/src/main/groovy/io.micronaut.build.internal.groovy-module.gradle
@@ -1,6 +1,16 @@
 plugins {
     id 'io.micronaut.build.internal.module'
     id 'io.micronaut.build.internal.groovy-base'
+    id("org.sonatype.gradle.plugins.scan")
+}
+String ossIndexUsername = System.getenv("OSS_INDEX_USERNAME") ?: project.properties["ossIndexUsername"]
+String ossIndexPassword = System.getenv("OSS_INDEX_PASSWORD") ?: project.properties["ossIndexPassword"]
+boolean sonatypePluginConfigured = ossIndexUsername != null && ossIndexPassword != null
+if (sonatypePluginConfigured) {
+    ossIndexAudit {
+        username = ossIndexUsername
+        password = ossIndexPassword
+    }
 }
 
 micronautBuild {

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -6,6 +6,7 @@ micronaut = "4.7.11"
 micronaut-test = "4.5.0"
 groovy = "4.0.18"
 spock = "2.3-groovy-4.0"
+sonatype-scan = "3.0.0"
 
 [libraries]
 # Core
@@ -14,3 +15,4 @@ micronaut-core = { module = 'io.micronaut:micronaut-core-bom', version.ref = 'mi
 javaparser = { module = 'com.github.javaparser:javaparser-core', version.ref = 'javaparser' }
 
 groovy-test = { module = 'org.apache.groovy:groovy-test', version = '' }
+sonatype-scan = { module = "org.sonatype.gradle.plugins:scan-gradle-plugin", version.ref = "sonatype-scan" }