search

TIBCOSoftware / bw6-plugin-maven

Plug-in Code for Apache Maven and TIBCO ActiveMatrix BusinessWorks™
Other
65 stars 80 forks source link

Exclude particular jar not being downloaded from maven repo ? #694

Closed TLNarayanaRao closed 1 month ago

TLNarayanaRao commented 1 year ago

Maven Plugin version: 2.9.2

Maven version:

Product : TIBCO Businessworks Container edition

Product version: 2.7.3

Component: Maven build plugin

Pom.xml dependency :

`

com.tibco.plugins bw6-maven-plugin 2.9.2 true enforce org.apache.maven.reporting:maven-reporting-impl

`

We would like to exclude the above dependency jar when we execute mvn clean package command from linux.

this dependency got the vulnerability which we need to address. I tried with above exclude dependency but didnt work.

if this feature is already implemented, please provide the example to exclude the dependency.

rutujadeo-TIBCO commented 2 months ago

Dependency exclusions do work while creating EAR using Maven ; when included on parent pom only. using the below tag:

  <exclusions>
    <exclusion>
      <groupId>com.tibco.bw</groupId> <!-- Exclude Project-E from Project-B -->
      <artifactId>ProjectD</artifactId>
    </exclusion>
  </exclusions>
rutujadeo-TIBCO commented 1 month ago

Addressed in Enhancement : BWCE-5298 , which is fixed in maven plugin version 2.9.8