CycloneDX / CycloneDX/cyclonedx-gradle-plugin

Unable to scan library in Web-INF/ Lib

Open
#296 8 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
239
Forks
102
Avg merge
1d 9h
Merged PRs (30d)
11

Description

@stevespringett - Is there a way to scan the legacy libraries which are present in Web-INF/Lib but not part of build.gradle.

Currently when I use cyclonedx, it generates bom for all the libraries defined in build.gradle but if there is any library not part of build.gradle, it excludes those libraries from BOM

So I want to know if there is any way to define a path in build.grqdle so that cyclonedx will generate bom with libraries that is present in that path? Or is there any other solution that you can recommend?

Contributor guide

Open the contributing guide

Research direction

Start with the build.gradle configuration and the plugin's dependency handling, then compare the generated BOM with libraries present in Web-INF/Lib but absent from build.gradle. Done means determining whether an explicit path can be configured for scanning or documenting the supported alternative.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.