integration-java-gradle test fails on License-Finder pipeline
Pipelines for the default branch fail, and this breaks the CI/CD process. See https://gitlab.com/gitlab-org/security-products/analyzers/license-finder/-/jobs/3560970783
Failures:
13549 1) gradle when scanning a gradle project that does not include the `com.github.hierynomus.license` plugin is able to detect licenses
13550 Failure/Error: expect(subject.licenses_for(dependency[:name])).to match_array(dependency[:licenses])
13551 expected collection contained: ["Apache-2.0", "SAX-PD", "W3C-20150513"]
13552 actual collection contained: []
13553 the missing elements were: ["Apache-2.0", "SAX-PD", "W3C-20150513"]
13554 # ./spec/integration/java/gradle_spec.rb:52:in `block (4 levels) in <top (required)>'
13555 # ./spec/integration/java/gradle_spec.rb:51:in `each'
13556 # ./spec/integration/java/gradle_spec.rb:51:in `block (3 levels) in <top (required)>'
The failing spec uses https://gitlab.com/one-touch-pipeline/otp to test license-finder on projects that don't use the com.github.hierynomus.license plugin to detect license.
Possible explanations:
- The dependencies of https://gitlab.com/one-touch-pipeline/otp have changed.
- https://gitlab.com/one-touch-pipeline/otp has changed in such a way that detection no longer works.
- There's a true regression, and license-finder no longer supports projects that don't use the
com.github.hierynomus.licenseplugin.
Edited by Fabien Catteau