integration-java-gradle test fails on License-Finder pipeline

Pipelines for the default branch fail, and this breaks the CI/CD process. See https://gitlab.com/gitlab-org/security-products/analyzers/license-finder/-/jobs/3560970783

Failures:
13549  1) gradle when scanning a gradle project that does not include the `com.github.hierynomus.license` plugin is able to detect licenses
13550     Failure/Error: expect(subject.licenses_for(dependency[:name])).to match_array(dependency[:licenses])
13551       expected collection contained:  ["Apache-2.0", "SAX-PD", "W3C-20150513"]
13552       actual collection contained:    []
13553       the missing elements were:      ["Apache-2.0", "SAX-PD", "W3C-20150513"]
13554     # ./spec/integration/java/gradle_spec.rb:52:in `block (4 levels) in <top (required)>'
13555     # ./spec/integration/java/gradle_spec.rb:51:in `each'
13556     # ./spec/integration/java/gradle_spec.rb:51:in `block (3 levels) in <top (required)>'

The failing spec uses https://gitlab.com/one-touch-pipeline/otp to test license-finder on projects that don't use the com.github.hierynomus.license plugin to detect license.

Possible explanations:

  • The dependencies of https://gitlab.com/one-touch-pipeline/otp have changed.
  • https://gitlab.com/one-touch-pipeline/otp has changed in such a way that detection no longer works.
  • There's a true regression, and license-finder no longer supports projects that don't use the com.github.hierynomus.license plugin.
Edited Jan 21, 2023 by Fabien Catteau
Assignee Loading
Time tracking Loading