search

jfrog / jfrog-azure-devops-extension

Apache License 2.0
48 stars 66 forks source link

Do we support to collect all dependency include build, project, compile and test scope in Artifactory build info when I do an maven build #176

Open lyqwaterway opened 4 years ago

lyqwaterway commented 4 years ago

Is your feature request related to a problem? Please describe. We can only collect a part of dependency when we do an maven build on azure pipeline

Describe the solution you'd like to see For now, We can collect two scope of maven project: compile and test. We want to collect all scope of maven project : build,project,compile,test. The build scope should contain the dependency of plugins such as 'org.apache.maven.plugins:maven-clean-plugin:2.6.1'

--

Describe alternatives you've considered May be we can provide an switch parameter if we want to collect all dependency.

Additional context

lyqwaterway commented 4 years ago

Is there any update for this issue? It will better if we can support this feature for DevSecOps

eyalbe4 commented 4 years ago

@lyqwaterway, Thanks for posting this and sorry for the late response here - When you're collecting build-info from the Artifactory Maven task, I believe that all maven dependencies are added to the build-info, with the exception of maven plugins that are used by the build - is this what you also saw? Are maven plugins what you're currently missing as part of the build-info? Thanks!

eyalbe4 commented 4 years ago

Hi @lyqwaterway, Please let me know if you wish to discuss this further.