SCA setup

Merge pull request #660 from Alfresco/PRODDEL-7832-UpdateSnapshot
[PRODDEL-7832] Switched to 4.9.0-SNAPSHOT
2026-09-16 18:13:23 +00:00 · 2024-04-04 15:01:34 +02:00 · 2024-03-06 17:06:20 +05:30 · 2024-03-06 16:44:13 +05:30 · 2024-03-05 16:48:53 +05:30
9 changed files with 27 additions and 7 deletions
@@ -28,6 +28,23 @@ jobs:
    steps:
      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v1.35.0

+  veracode_sca:
+    name: "Veracode - Source Clear Scan (SCA)"
+    runs-on: ubuntu-latest
+    if: >
+      github.ref_name == 'master' ||
+      github.event_name == 'pull_request'
+    steps:
+      - uses: actions/checkout@v3
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v1.34.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v1.34.0
+      - name: "Clean-up SNAPSHOT artifacts"
+        run: find "${HOME}/.m2/repository/" -type d -name "*-SNAPSHOT*" | xargs -r -l rm -rf
+      - uses: Alfresco/alfresco-build-tools/.github/actions/veracode@v1.34.0
+        continue-on-error: true
+        with:
+          srcclr-api-token: ${{ secrets.SRCCLR_API_TOKEN }}
+
  build:
    name: "Build application"
    runs-on: ubuntu-latest
@@ -11,7 +11,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.8.0</version>
+    <version>4.9.0-SNAPSHOT</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -12,7 +12,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.8.0</version>
+    <version>4.9.0-SNAPSHOT</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -14,7 +14,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.8.0</version>
+        <version>4.9.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -17,7 +17,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.8.0</version>
+        <version>4.9.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -10,7 +10,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.8.0</version>
+        <version>4.9.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -8,7 +8,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.8.0</version>
+        <version>4.9.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -3,7 +3,7 @@
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.8.0</version>
+    <version>4.9.0-SNAPSHOT</version>
    <name>Alfresco SDK</name>
    <description>This aggregator Project builds all modules required for the Alfresco SDK</description>
    <packaging>pom</packaging>
@@ -0,0 +1,3 @@
+# To avoid the provided dependencies we set the scope to runtime. See: https://docs.veracode.com/r/c_sc_scan_directives
+# runtime: to restrict the scan to compile and runtime dependencies.
+scope: runtime
Author	SHA1	Message	Date
mstrankowski	2bc06e4222	SCA setup	2024-04-04 15:01:34 +02:00
Suneet Gupta	4f70d0f575	Merge pull request #660 from Alfresco/PRODDEL-7832-UpdateSnapshot [PRODDEL-7832] Switched to 4.9.0-SNAPSHOT	2024-03-06 17:06:20 +05:30
Manish Kumar	fd106b13c7	[PRODDEL-7832] Switched to 4.9.0-SNAPSHOT	2024-03-06 16:44:13 +05:30
Suneet Gupta	f59a05a0c0	Merge pull request #659 from Alfresco/release/PRODDEL-7832-PrepareRelease4.8 [PRODDEL-7832] Prepare 4.8 release	2024-03-05 16:48:53 +05:30