nicoloboschi commented on code in PR #17765:
URL: https://github.com/apache/pulsar/pull/17765#discussion_r977461932
##########
.github/workflows/ci-owasp-dep-check.yaml:
##########
@@ -84,9 +84,9 @@ jobs:
df -h
# Projects dependent on flume, hdfs, hbase, and presto currently
excluded from the scan.
- - name: run "clean install verify" to trigger dependency check
+ - name: run "clean verify" to trigger dependency check
if: ${{ steps.changes.outputs.poms == 'true' }}
- run: mvn -q -B -ntp clean install verify
-PskipDocker,owasp-dependency-check -DskipTests -pl
'!pulsar-sql,!distribution/io,!distribution/offloaders,!tiered-storage/file-system,!pulsar-io/flume,!pulsar-io/hbase,!pulsar-io/hdfs2,!pulsar-io/hdfs3,!pulsar-io/docs'
+ run: mvn -q -B -ntp clean verify -PskipDocker,owasp-dependency-check
-DskipTests -pl
'!pulsar-sql,!distribution,!distribution/server,!distribution/io,!distribution/offloaders,!tiered-storage/file-system,!pulsar-io/flume,!pulsar-io/hbase,!pulsar-io/hdfs2,!pulsar-io/hdfs3,!pulsar-io/docs'
Review Comment:
in this way we are removing the whole scan for the main distro!
we need to add suppressions for the presto dependencies if we cannot upgrade
them
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
