Allow target dir and configuration name to be customizable in sbt dependency scanning

Release notes

Problem to solve

The artifact directory for sbt projects is customizable. It is target by default and this path is hardcoded into gemnasium-maven.

However, a user can specify another artifact directory for their build. In this case the analyzer will not find the generated artifacts (specifically the dot files).

Similarly, a user may want to analyze a configuration other than compile. Thisgemnasium-maven is hardcoded to produce a dependencies-compile.dot file, but if analyzing a configuration like test the file produced will be dependencies-test.dot.

Proposal

Add configuration variables allowing users to customize the following in dependency scanning of sbt projects:

  1. artifact directory
  2. configuration name

This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.

Edited by 🤖 GitLab Bot 🤖