Empty list generated from License Compliance Java/Gradle scanning

DevSecOps
1

empty gl-license-scanning-report.json from License Compliance Java/Gradle scanning

Settings
.gitlab-ci.yml:
…
include:

    • template: Dependency-Scanning.gitlab-ci.yml*
    • template: License-Scanning.gitlab-ci.yml*

build.gradle:

plugins {
id ‘java’
id ‘groovy’
…
id ‘com.github.hierynomus.license’ version ‘0.13.0’
}
…
downloadLicenses {
includeProjectDependencies = true
//dependencyConfiguration = ‘compile’
}

Environment

  • Enterise GitLab: 13.1.3-ee

  • Gradle: 6.4

Current Behavior
gl-license-scanning-report.json is created and uploaded as an artifact, but it is always empty in both of the Plugin version,‘0.13.0’ and ‘0.15.0’ .

When testing the plugin locally, it generates an empty report of project dependency licenses in running ./gradlew downloadLicenses.

Questions

  1. dose anyone have successfully generate license check reports with Java/Gradle project? if so, what is configuration for the plugin?
  2. is there other licensing check plugin for License Compliance?