[JIRA] (JPAR-190) Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *commented* on JPAR-190 ( https://shibboleth.atlassian.net/browse/JPAR-190?atlOrigin=eyJpIjoiMWUwMzhiZTdiNzhmNDdlZWIzMWZjZjE1OTc0MTQ4M2MiLCJwIjoiaiJ9 )

Re: Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a build ( https://shibboleth.atlassian.net/browse/JPAR-190?atlOrigin=eyJpIjoiMWUwMzhiZTdiNzhmNDdlZWIzMWZjZjE1OTc0MTQ4M2MiLCJwIjoiaiJ9 )

The enforcer is now updates and the trust infrastructure “from scratch” has been done.

We now need to do “something” between Maven and Jenkins such that the build which starts with an empty repository runs with

<checkM2>true</checkM2>

in the parameterization for the <jarEnforcer>

I’m assuming that this can all be done with profiles but I am not sure how our profiles currently works so I’ll ask Tom Zeller ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A0fa99aa9-d698-454c-a274-7a41bee6cef5 ) to do that bit.

*Note* that it is quite possible that this will fail the first time we run it. Just because I have done a complete build with it on doesn’t mean that the nightly (or whatever) build doesn’t bring down more stuff.

( https://shibboleth.atlassian.net/browse/JPAR-190#add-comment?atlOrigin=eyJpIjoiMWUwMzhiZTdiNzhmNDdlZWIzMWZjZjE1OTc0MTQ4M2MiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JPAR-190#add-comment?atlOrigin=eyJpIjoiMWUwMzhiZTdiNzhmNDdlZWIzMWZjZjE1OTc0MTQ4M2MiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:445115c )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211014/63cdb550/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-a864d0b5-71f7-4bb4-9aa8-5e4725854a54
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211014/63cdb550/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-4be18b90-7d6a-4ad9-8583-17f898fbc7c5
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211014/63cdb550/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-5cf7d156-123a-42ef-bdb4-3eed4dc74690
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211014/63cdb550/attachment-0005.png>