Releases: sonatype-nexus-community/scan-gradle-plugin
Releases · sonatype-nexus-community/scan-gradle-plugin
Option to skip printing the banner
From #63 there is now the option printBanner
to avoid printing the text banner for OSS Index and reduce possible noise.
Fix issue in Windows prompt
Fix #61 allowing the plugin to be usable in Windows prompt/console.
Android Projects with Multiple Favors and Exclusions for OSS Index
- Fix #56 fixing support for Android project with more than one flavor.
- Allows to exclude specific components or vulnerabilities from OSS Index using
excludeCoordinates
andexcludeVulnerabilityIds
Improvements for Android and OSS Index
- Gradle build variants and Android nested modules with variants are now fully support (both for Nexus IQ Server and OSS Index), without needing to alter your
build.gradle
script (#41). - A new output has been added as default for OSS Index using a table layout to improve readability. The dependency graph output has been keep and can be enabled using the property
dependencyGraph
(#43). - OSS Index running this plugin behind a proxy can set its details using the property
proxyConfiguration
(#40). - To reduce the noise in the OSS Index output, from this version only the dependencies with vulnerabilities will be printed (for both the table and the graph outputs). To see all dependencies the new flag
showAll
has been created (#28). - Documentation has been improved and a repository with examples of usage in CI tools has been added (#36).
Vulnerabilities found in OSS Index sorted by score
Now, when using OSS Index, the vulnerabilities found on each component will be sorted by its score, allowing you to focus first in the most severe ones.
Support for Android Projects Using Product Flavors
Android projects using build variants with product flavors are finally supported. All dependencies are found both for OSS Index and Nexus IQ Server.
OSS Index Results Easier to Understand
Now, to provide a more friendly output for OSS Index results the plugin will:
- Add a description to the vulnerability according to its score. Previously only the numeric value was shown (i.e.
8.8
) and now it will be8.8/10, High
. - User a color to print the vulnerability, according to the scale of its score: High, Medium, Low
Nexus IQ Server user role and dependencies from all configurations
- Improves doc and logs to reflect the required role for Nexus IQ Server users.
- Adds the
allConfigurations
flag to include dependencies from all Gradle dependency configurations. - Gradle version support bumped to minimum 3.3
Shows the dependencies and the found vulnerabilities in a tree structure for OSS Index
1.0.4 [skip ci] [Gradle Release Plugin] - creating tag: '1.0.4'.
Solves conflicting classpath with other plugins due to internal libraries
1.0.3 [skip ci] [Gradle Release Plugin] - creating tag: '1.0.3'.