Skip to content

DS for swift verification integrate swift with gemnasium flow

What does this MR do?

This Merge Request ensures that the new Swift Package Manager integration aligns with Gemnasium's existing PresetGemnasium flow. It assumes that the lock file is located in the project directory and eliminates the need to build the Swift project for dependency scanning.

Additionally, it includes the necessary fixes to accomplish a full scanning flow, such as:

  1. Updating the configuration to locate and read the lock file correctly.
  2. Adjusting the dependency analysis to work without requiring a build step.
  3. Ensuring compatibility with existing Gemnasium features and reporting mechanisms.
  4. Validate the integration with test cases to confirm that the scanning process works as intended.

What are the relevant issue numbers?

DS for Swift verification: Integrate Swift with... (gitlab-org/gitlab#461777 - closed)

Does this MR meet the acceptance criteria?

Merge request reports