CycloneDX / CycloneDX/cyclonedx-gradle-plugin
Exclude dependencies by name
- Dominant language
- Java
- Stars
- 239
- Forks
- 102
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 11
Description
Can we please have the possibility to exclude specific dependencies?
## Example:
```
...
dependencies {
testImplementation platform('org.junit:junit-bom:5.9.1')
implementation 'group.own.lib:own-lib:1.0.0'
}
...
cyclonedxBom {
excludes = [
'org.junit:junit-bom',
'group.own.lib:own-lib'
]
}
/* or something like
cyclonedxBom {
dependencies {
exclude(dependency('org.junit:junit-bom'))
exclude(dependency('group.own.lib:own-lib'))
}
}
*/
...
```
Contributor guide
Research direction
The issue provides no file or test path. Start by locating the cyclonedxBom configuration and the code that collects Gradle dependencies, then compare the requested name-based exclusions with existing plugin behavior. Done means the example exclusions are honored in the generated SBOM and covered by a regression test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100