[
https://issues.apache.org/jira/browse/OFBIZ-7783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15407544#comment-15407544 ]
Jacques Le Roux commented on OFBIZ-7783:
----------------------------------------
Yes it's a different problem, because basically I want to check the vulnerability of all the libs used.
As I said at
https://issues.apache.org/jira/browse/OFBIZ-7930?focusedCommentId=15398908&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15398908 I was inspired by your solution but needed all the libs (not only runtime libs as in your case). Finally using the OWASP dependency check plugin is a far better solution for "my" problem and is still a WIP at OFBIZ-7930.
I personnaly see no problems adding the copyToLib task OOTB and would happily commit it if nobody disagree. Of course this task is a server (ie QA, UAT, production) environment task, so would be rather
{code}
task copyToLib(group: ofbizServer, type: Copy, description: 'Copy runtime libs in a QA, UAT or production environment') {
into "$rootDir/lib"
from configurations.runtime
}
{code}
Also maybe more would be needed to provide a ready-made complete copy for these environments. Like removing .gradle, gradle, build, etc. folders. Then also moving ofbiz.jar from build\libs (before droping it ;))...in root for instance... But then your solution for OFBIZ-7796 would need to be modified. So maybe better to keep the useless bagages. Actually I think all that is trivial when you are at a QA, UAT or production stage and may depend on servers policies. Still copyToLib makes sense.
> External library files are not in the OFBiz folder structure.
> -------------------------------------------------------------
>
> Key: OFBIZ-7783
> URL:
https://issues.apache.org/jira/browse/OFBIZ-7783> Project: OFBiz
> Issue Type: Sub-task
> Components: ALL COMPONENTS
> Reporter: Pierre Smits
> Assignee: Jacques Le Roux
> Priority: Blocker
>
> With the implementation of the external library download feature of gradle/gradlew, the external libraries (jar files) are not in the folder structure any more.
> They should reside there, like before.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Locked
