ofbiz-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jacques Le Roux (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OFBIZ-7930) Copy external jars in OFBiz $buildDir/externalJars for (at least) dependency check
Date Wed, 27 Jul 2016 12:30:20 GMT

    [ https://issues.apache.org/jira/browse/OFBIZ-7930?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15395577#comment-15395577
] 

Jacques Le Roux commented on OFBIZ-7930:
----------------------------------------

I quote my comment here for convenience
{quote}
Actually I needed more the compile part, but I think I'll also add the runtime one but w/o
the JDBC drivers because I agree we should not have them by default loaded. I explained why
at https://issues.apache.org/jira/browse/OFBIZ-7808?focusedCommentId=15393595&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15393595

I'll maybe have to exclude more libs, working on it with OWASP Dependencies checker will let
me know.
{quote}

> Copy external jars in OFBiz $buildDir/externalJars for (at least) dependency check
> ----------------------------------------------------------------------------------
>
>                 Key: OFBIZ-7930
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-7930
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>             Fix For: Upcoming Branch
>
>
> As I warned at https://cwiki.apache.org/confluence/display/OFBIZ/About+OWASP+Dependency+Check
it's currently difficult to separate the OFBiz jars from other jars in the .gradle\caches
contains which may contain jars unrelated to OFBiz. Notably Eclipse jars if you use the Gradle
Eclipse task and more if you use Gradle for other reasons than OFBiz.
> I did not find yet a way to avoid to have all external jars in .gradle\caches and I wonder
if it's even possible. What I would like to have is the external jars mandatory for OFBiz
to work in an isolated place. For instance a sub folder of the main Gradle build folder. I
picked $buildDir/externalJars.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message