Support Java 15 for Dependency Scanning

Release notes

https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#configuring-specific-analyzers-used-by-dependency-scanning

For customers keeping using Java 15 you will be happy to know that you are now supported by our Dependency Scanning analyzers. Please set the DS_JAVA_VERSION environment variable to leverage this enhancement.

Summary

Dependency Scanning supports java up to version 14. Version 15 made to GA recently (2020-09) and should be supported as well.

Further details

gemnasium-maven analyzer handles support for jvm based languages and currently supports java versions 8, 11, 13, 14. 15 can be added in a similar way and used by the user through the DS_JAVA_VERSION env var.

Implementation plan

• add adoptopenjdk-15.0.2+7 (or latest stable version adoptopenjdk-15.0.2+7 (asdf list all java | grep adoptopenjdk-15 | grep -v openj9 | tail -1) to https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium-maven/-/blob/master/config/.tool-versions
• release new version of gemnasium-maven

Documentation

• support for java 15 to be documented under DS_JAVA_VERSION row of DS analyzer configuration.

Availability & Testing

Add java 15 job for each supported framework as in https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium-maven/-/blob/master/.gitlab-ci.yml#L58

• java-maven
• java-gradle