Add DS_MAVEN_VERSION to gemnasium to allow switching to different maven versions
Proposal
While investigating Draft: Add DS_MAVEN_VERSION to gemnasium to all... (gitlab-org/security-products/analyzers/gemnasium!541 - closed), it became apparent that upgrading the version of maven from 3.6.3
to 3.8.7
was a breaking change, so an alternative was suggested:
In the meantime, we can add
maven 3.8.7
(or possibly3.9.2
) as an additional, non-default option for those that want to use it. Having said that, this would require adding support for switching betweenmaven
versions, possibly by exposing aDS_MAVEN_VERSION
environment variable, similar to how we allow users to set the java version by configuring the DS_JAVA_VERSION environment variable.
The purpose of this issue is to implement the above suggestion.
Implementation plan
-
Resume the work in Draft: Add DS_MAVEN_VERSION to gemnasium to all... (gitlab-org/security-products/analyzers/gemnasium!541 - closed) Most of the logic has already been implemented, we just need to complete the following:
-
Add image integration tests to confirm that switching the version of maven using DS_MAVEN_VERSION
works as expected. -
If possible, add a image integration tests for a projects that only work with the following versions of maven: 3.6.3
3.8.7
3.9.2
-
-
Document the DS_MAVEN_VERSION
variable in the Dependency Scanning docs