Re: OSS Nexus vs GitHub Packages

2021-07-27 Thread Mantas Gridinas
I'll second alexander. You also need to add credentials per repository that would host the package as well as that repository declaration into your pom declaration. In addition Dependabot cannot scan github packages hosts unless you give it the credentials as well. All in all, github packages woul

Re: OSS Nexus vs GitHub Packages

2021-07-27 Thread Alexander Kriegisch
It is possible to use GH Packages repos locally, if you configure Maven correctly. But I found working with it a no-go, espacially for OSS projects, because you do not only need credentials in order to deploy artifacts, but also in order to *consume* them!!! This is a no-go, IMO. Even if the reposi

Re: Questions on what xml tags to use for pom.xml file for downloading isos

2021-07-27 Thread Greg Chabala
If it works, it works. It sounds like you're not really using Maven to build software in this case, you're only using (or abusing) it to download binaries. If the binaries you were downloading were actually libraries that Maven was using to compile software against, it would be more conventional f

RE: Questions on what xml tags to use for pom.xml file for downloading isos

2021-07-27 Thread christopher.mil...@gd-ms.com
Thanks for the write up. I'm watching a few videos on youtube, trying to understand the pros of using Dependencies and I'm still not understanding, Vs what I have currently mark up tags that pertain to the ISOs that I want to download under and tags. -Original Message- From: G

Re: Questions on what xml tags to use for pom.xml file for downloading isos

2021-07-27 Thread Greg Chabala
Sounds like you're all set, but as you asked for an example with the dependencies tag: http://maven.apache.org/POM/4.0.0"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd";>

RE: Questions on what xml tags to use for pom.xml file for downloading isos

2021-07-27 Thread christopher.mil...@gd-ms.com
Thanks for the help on this as it was very helpful. All I needed was the following tag: ${depStagingArea} This places the multiple ISOs under the correct directory in RHEL OS where it was defined under the following tag: /dropbox/foo -Original Message- From: Nick Stolwijk

RE: Questions on what xml tags to use for pom.xml file for downloading isos

2021-07-27 Thread christopher.mil...@gd-ms.com
Sorry, forgot to include the mvn command I'm running to download all of the ISOs: mvn dependency:copy -f multi_iso_downloader_pom_modified.xml -s ~/.m2/settings.xml Do you have an example I can reference artifacts that are defined in a top level tag? thanks -Original Message-

Re: OSS Nexus vs GitHub Packages

2021-07-27 Thread Stephan Wissel
We worked with all sorts of repos and I have to say GitHub provided the least stressful environment. The combination of Git functionality with GitHub actions is delightful. You can ditch your CI and bug tracker. Especially nice the VSCode integration where a //TODO in code reflects as issue in Git

Re: OSS Nexus vs GitHub Packages

2021-07-27 Thread Oliver Fischer
In one of my projects, we started with Github packages. After a while and having a lot of projects and various organisations, it turned out to be very complicated to manage all these different repositories in the setting.xml files of the developers. So, it was hard to stay on the top of the thi

Re: OSS Nexus vs GitHub Packages

2021-07-27 Thread Tommy Svensson
I played with GitHub packages thinking I could use it as a general binary repo, but NO! It turned out that what is published on GitHub packages are only available from within GitHub! Anything built with GitHub CI can use GitHub packages. If you want to build locally you cannot access Github pack

OSS Nexus vs GitHub Packages

2021-07-27 Thread Stephen Coy
Hi all, Just wondering if anyone has any thoughts on using GitHub Packages as a company repo vs Nexus. Right now we (about 30-40 devs) are using an ageing version of Sonatype Nexus for onsite builds and S3 for “cloud” based builds (a process inherited from using Spring Boot). Now there is a

analyse dependency collection times

2021-07-27 Thread Delany
Is there a guide or tool to make sense of the "Dependency collection stats" that `mvn -X` produces? Thanks, Delany