mirror of
https://github.com/honeymoose/OpenSearch.git
synced 2025-02-07 21:48:39 +00:00
3828ec60f5
- third party audit detects jar hell with JDK so we disable it - jdk non portable in forbiddenapis detects classes being used from the JDK ( for fips ) that are not portable, this is intended so we don't scan for it on fips. - different exclusion rules for third party audit on fips Closes #33179
48 lines
1.7 KiB
Groovy
48 lines
1.7 KiB
Groovy
/*
|
|
* Licensed to Elasticsearch under one or more contributor
|
|
* license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright
|
|
* ownership. Elasticsearch licenses this file to you under
|
|
* the Apache License, Version 2.0 (the "License"); you may
|
|
* not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing,
|
|
* software distributed under the License is distributed on an
|
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
* KIND, either express or implied. See the License for the
|
|
* specific language governing permissions and limitations
|
|
* under the License.
|
|
*/
|
|
|
|
apply plugin: 'elasticsearch.build'
|
|
|
|
archivesBaseName = 'elasticsearch-plugin-cli'
|
|
|
|
dependencies {
|
|
compileOnly "org.elasticsearch:elasticsearch:${version}"
|
|
compileOnly "org.elasticsearch:elasticsearch-cli:${version}"
|
|
compile "org.bouncycastle:bcpg-jdk15on:1.59"
|
|
compile "org.bouncycastle:bcprov-jdk15on:1.59"
|
|
testCompile "org.elasticsearch.test:framework:${version}"
|
|
testCompile 'com.google.jimfs:jimfs:1.1'
|
|
testCompile 'com.google.guava:guava:18.0'
|
|
}
|
|
|
|
dependencyLicenses {
|
|
mapping from: /bc.*/, to: 'bouncycastle'
|
|
}
|
|
|
|
test {
|
|
// TODO: find a way to add permissions for the tests in this module
|
|
systemProperty 'tests.security.manager', 'false'
|
|
}
|
|
|
|
if (project.inFipsJvm) {
|
|
// FIPS JVM includes manny classes from bouncycastle which count as jar hell for the third party audit,
|
|
// rather than provide a long list of exclusions, disable the check on FIPS.
|
|
thirdPartyAudit.enabled = false
|
|
}
|