admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-02-09 02:03:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(java): add support remote repositories from settings.xml files (#9708)

Browse Source 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
DmitriyLewen
2025-10-28 14:35:19 +06:00
committed by GitHub
parent fb0593bee6
commit eff52eb2e6
10 changed files with 715 additions and 154 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
pkg/dependency/parser/java/pom/testdata/repository-for-settings-repo/org/example/example-api/1.7.30/example-api-1.7.30.pom vendored Normal file
View File

@@ -0,0 +1,23 @@
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<groupId>org.example</groupId>
<artifactId>example-api</artifactId>
<version>1.7.30</version>
<packaging>jar</packaging>
<name>Example API Module</name>
<description>The example API</description>
<licenses>
<license>
<name>Custom License from custom repo</name>
<url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
<distribution>repo</distribution>
</license>
</licenses>
</project>

45
pkg/dependency/parser/java/pom/testdata/settings/global/conf/settings.xml vendored
View File

@@ -18,4 +18,49 @@
<username>test-user-only</username>
</server>
</servers>
<profiles>
<profile>
<id>mycompany-global</id>
<repositories>
<repository>
<id>mycompany-internal-releases</id>
<url>https://mycompany.example.com/repository/internal-releases</url>
<releases>
<enabled>true</enabled>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
<repository>
<id>mycompany-global-releases</id>
<url>https://mycompany.example.com/repository/global-releases</url>
<releases>
<enabled>true</enabled>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
</repositories>
</profile>
<profile>
<id>default</id>
<repositories>
<repository>
<id>mycompany-default-releases</id>
<url>https://mycompany.example.com/repository/default-releases</url>
<releases>
<enabled>true</enabled>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
</repositories>
<activation>
<activeByDefault>true</activeByDefault>
</activation>
</profile>
</profiles>
</settings>

21
pkg/dependency/parser/java/pom/testdata/settings/user-settings-with-env-placeholders/.m2/settings.xml vendored
View File

@@ -18,4 +18,25 @@
<username>test-user-only</username>
</server>
</servers>
<profiles>
<profile>
<id>${env.PROFILE_ID}</id>
<repositories>
<repository>
<id>${env.REPO_ID}</id>
<url>${env.REPO_URL}/repository/user-releases</url>
<releases>
<enabled>true</enabled>
<checksumPolicy>fail</checksumPolicy>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
</repositories>
</profile>
</profiles>
<activeProfiles>
<activeProfile>${env.PROFILE_ID}</activeProfile>
</activeProfiles>
</settings>

34
pkg/dependency/parser/java/pom/testdata/settings/user/.m2/settings.xml vendored
View File

@@ -18,4 +18,38 @@
<username>test-user-only</username>
</server>
</servers>
<profiles>
<profile>
<id>mycompany-global</id>
<repositories>
<repository>
<id>mycompany-releases</id>
<url>https://mycompany.example.com/repository/user-releases</url>
<releases>
<enabled>true</enabled>
<checksumPolicy>fail</checksumPolicy>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
<repository>
<id>mycompany-user-snapshots</id>
<url>https://mycompany.example.com/repository/user-snapshots</url>
<releases>
<enabled>false</enabled>
</releases>
<snapshots>
<enabled>true</enabled>
</snapshots>
</repository>
</repositories>
<activation>
<activeByDefault>true</activeByDefault>
</activation>
</profile>
</profiles>
<activeProfiles>
<activeProfile>mycompany-global</activeProfile>
</activeProfiles>
</settings>