CycloneDX / CycloneDX/cyclonedx-gradle-plugin
Unable to scan library in Web-INF/ Lib
- Dominant language
- Java
- Stars
- 239
- Forks
- 102
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 11
Description
@stevespringett - Is there a way to scan the legacy libraries which are present in Web-INF/Lib but not part of build.gradle.
Currently when I use cyclonedx, it generates bom for all the libraries defined in build.gradle but if there is any library not part of build.gradle, it excludes those libraries from BOM
So I want to know if there is any way to define a path in build.grqdle so that cyclonedx will generate bom with libraries that is present in that path? Or is there any other solution that you can recommend?
Contributor guide
Research direction
Start with the build.gradle configuration and the plugin's dependency handling, then compare the generated BOM with libraries present in Web-INF/Lib but absent from build.gradle. Done means determining whether an explicit path can be configured for scanning or documenting the supported alternative.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100