Suggested Android integration has stopped working since Android Gradle Plugin 3.0 - Sonatype Lifecycle & Repository Firewall - Sonatype Community

Suggested Android integration has stopped working since Android Gradle Plugin 3.0

post by belokopytov.n on Feb 27, 2019

Belokopytov N

In the end of December I was struggling to integrate the Nexus IQ scan with my Android project and could not find much info on that. After 3-4 days of going through documentation of Gradle, looking at the topic here How to scan Android for Vulnerabilities? and intense Groovy regexp session I have managed to correct the implementation of copyDependencies method that was described in the old topic.

This experience was quite brutal and I would like to share back to the community the results of my work so that the next people who come around don’t struggle so much and have a better position.

post by belokopytov.n on Feb 27, 2019

Here is the gist with copyDependencies gradle task generation

and my guide on Medium on how to use it and what is inside this script. (Couldn’t link directly to Medium, so posting a link to linkedin)

post by jwhitehouse on Feb 27, 2019

Jamie Whitehouse

Thanks @belokopytov.n for sharing.

New & Unread Topics

Topic Replies Views Activity
IQ Firewall: Database update frequency and coverage of new libraries against recent threats 4 39 Jun 9
Bom scan does not generate a report 3 122 Mar 11
Sonatype Firewall Pro now available for third-party users! 1 95 May 28
how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry 1 65 Apr 21
Batch Deletion of expired waivers 1 26 26d