Hi,
I would like to use Security/License-Scanning.gitlab-ci.yml
in my CI process.
I have included this template and job is passed but output is empty. Logs below:
$ /run.sh analyze .
Selecting previously unselected package asdf.
(Reading database ... 19516 files and directories currently installed.)
Preparing to unpack .../asdf_0.7.8-1_amd64.deb ...
Unpacking asdf (0.7.8-1) ...
Setting up asdf (0.7.8-1) ...
Added development to the ignored groups
Added develop to the ignored groups
Added test to the ignored groups
license_management report --prepare-no-fail --format=json --save=gl-license-scanning-report.json --no-recursive --recursive
LicenseFinder::Maven: is active
Selecting previously unselected package java-11.
(Reading database ... 21738 files and directories currently installed.)
Preparing to unpack .../java-11_11-1_amd64.deb ...
Unpacking java-11 (11-1) ...
Setting up java-11 (11-1) ...
java 11 is already installed
LicenseFinder::Maven: is not installed
I am using gitlab.com with the Premium SaaS Plan (Formerly Silver). Docs are marked as Ultimate but I thought it is about Merge Request integration.
gitlab-ci.yml:
license_scanning:
variables:
MAVEN_CLI_OPTS: -s $CI_PROJECT_DIR/.m2/settings.xml --batch-mode --errors --fail-at-end --show-version --no-transfer-progress -DskipTests
LM_JAVA_VERSION: 11
LICENSE_FINDER_CLI_OPTS: "--recursive"
rules:
- if: $CI_COMMIT_TAG
when: never
- if: '$CI_COMMIT_REF_NAME == "master"'
when: on_success
- changes:
- src/**/*
- web/**/*
- pom.xml
when: on_success
- when: never
artifacts:
paths: [ gl-license-scanning-report.json ]
Similar issue with the gemnasium-dependency_scanning
:
$ /analyzer run
[INFO] [Gemnasium] [2021-05-06T12:27:41Z] ▶ GitLab Gemnasium analyzer v2.29.5
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: .
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ skip ignored directory: .gitlab
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ skip ignored directory: .m2
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ skip ignored directory: .mvn
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ skip ignored directory: .git
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: src
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: src/main
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: src/test
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: docks
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target/maven-archiver
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target/generated-test-sources
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target/generated-sources
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target/maven-status
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target/test-classes
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: target/classes
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: web
[DEBU] [Gemnasium] [2021-05-06T12:27:41Z] ▶ scanning directory: web/WEB-INF
[WARN] [Gemnasium] [2021-05-06T12:27:41Z] ▶ No match in /builds/<project path>
but my pom.xml
is in the root directory.
Are both issue related to the premium/silver
license and I cannot use those templates in CI or there is something wrong with my configuration?
Thank you for your help.