search

advanced-security / maven-dependency-submission-action

GitHub Action for submitting Maven dependencies
MIT License
46 stars 27 forks source link

No dependencies submitted when Maven outputDirectory set to a non-default value #48

Open peter-murray opened 10 months ago

peter-murray commented 10 months ago

If the POM utilizes a non-default outputDirectory the current execution of the dependency tree generation will use this non default location that the action will look for the results in.

Fetching the output directory setting will require dumping and parsing the effective POM which will add over head in the execution time. The depgraph-maven-plugin does have support for explicitly setting the output directory for the dependency tree files that are being parsed.

For a sensible interim (maybe long term fix) set the outputDirectory to target (the default maven setting, unless overridden) so as to provide a consistent place to fetch the dependency data from.

peter-murray commented 9 months ago

This was added in 3.0.3 to hard code the output directory to target when running the action