Generate dependency whitelist report (#9909)

* Generate dependency whitelist report * Add versioning tag * Include perf test core and storage perf test in ignore list
AzureSDKAutomation · Apr 7, 2020 · 868667e · 868667e
1 parent 38a2980
commit 868667e
Show file tree

Hide file tree

Showing 4 changed files with 33 additions and 0 deletions.
diff --git a/eng/code-quality-reports/src/main/resources/index.html b/eng/code-quality-reports/src/main/resources/index.html
@@ -519,6 +519,10 @@ <h2>Azure Java SDK</h2>
                         <ion-icon name="ribbon"></ion-icon>
                         <a href="test-coverage/index.html" target="_blank" class="links">Test coverage (Aggregate)</a>
                     </li>
+                    <li class="list-group-item sub-component">
+                        <ion-icon name="copy"></ion-icon>
+                        <a href="staging/dependency-whitelist.json" target="_blank" class="links">Dependency Whitelist (Aggregate)</a>
+                    </li>
                 </div>
             </ul>
 

diff --git a/eng/pipelines/aggregate-reports.yml b/eng/pipelines/aggregate-reports.yml
@@ -92,6 +92,7 @@ jobs:
 
     - pwsh: |
         copy -r target/staging $(Build.ArtifactStagingDirectory)
+        copy dependency-whitelist.json (Join-Path $(Build.ArtifactStagingDirectory) "staging")
         copy eng/code-quality-reports/src/main/resources/index.html $(Build.ArtifactStagingDirectory)
         copy output/pom.client.html (Join-Path $(Build.ArtifactStagingDirectory) "staging")
         copy eng/common/InterdependencyGraph.html (Join-Path $(Build.ArtifactStagingDirectory) "staging")

diff --git a/eng/versioning/external_dependencies.txt b/eng/versioning/external_dependencies.txt
@@ -112,6 +112,7 @@ io.dropwizard.metrics:metrics-jvm;4.0.5
 io.reactivex.rxjava2:rxjava;2.2.4
 net.java.dev.jna:jna-platform;5.4.0
 net.jonathangiles.tools:dependencyChecker-maven-plugin;1.0.4
+net.jonathangiles.tools:whitelistgenerator-maven-plugin;1.0.1
 org.apache.commons:commons-collections4;4.2
 org.apache.commons:commons-lang3;3.8.1
 org.apache.commons:commons-text;1.6

diff --git a/pom.client.xml b/pom.client.xml
@@ -419,6 +419,33 @@
         </executions>
       </plugin>
 
+      <plugin>
+        <groupId>net.jonathangiles.tools</groupId>
+        <artifactId>whitelistgenerator-maven-plugin</artifactId>
+        <version>1.0.1</version> <!-- {x-version-update;net.jonathangiles.tools:whitelistgenerator-maven-plugin;external_dependency} -->
+        <executions>
+          <execution>
+            <id>generateWhitelistReport</id>
+            <phase>package</phase>
+            <goals>
+              <goal>report</goal>
+            </goals>
+            <configuration>
+              <baseDir>.</baseDir>
+              <reportFile>dependency-whitelist.json</reportFile>
+              <ignoredGA>
+                <param>com.azure:azure-cosmos-examples</param>
+                <param>com.azure:azure-cosmos-benchmark</param>
+                <param>com.azure:azure-core-test</param>
+                <param>com.azure:azure-e2e</param>
+                <param>com.azure:azure-storage-perf</param>
+                <param>com.azure:perf-test-core</param>
+              </ignoredGA>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
+
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-enforcer-plugin</artifactId>