Automatically integrates FOSSA CLI into Maven builds.
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.circleci
src
.fossa.yml
.gitignore
LICENSE
README.md
pom.xml

README.md

CircleCI

FOSSA Maven plugin

This plugin integrates into Maven to report Maven dependencies in your build. It is intended for use cases where you need to roll out across a large number of Maven projects.

Most projects should prefer the FOSSA CLI, which provides additional integrations and functionality. The advantage of the Maven plugin is easy integration with pre-existing Maven projects. If you have many Maven projects that share a single parent POM, you can integrate this plugin once with the parent POM to integrate with all of its children.

Usage

You can install the FOSSA Maven plugin from GitHub using JitPack. An example configuration is provided below:

<project>
  <!-- Other project elements... -->
	<pluginRepositories>
		<pluginRepository>
		    <id>jitpack.io</id>
		    <url>https://jitpack.io</url>
		</pluginRepository>
	</pluginRepositories>

  <build>
    <!-- Other build elements... -->
    <plugins>
      <!-- Other plugin elements... -->
      <plugin>
        <groupId>com.github.fossas</groupId>
        <artifactId>fossa-maven-plugin</artifactId>
        <version>1.0.3</version>
        <configuration>
          <apiKey>your-key-here</apiKey>
        </configuration>
        <!-- Include this section to automatically analyze on installation. -->
        <executions>
          <execution>
            <phase>install</phase>
            <goals>
              <goal>analyze</goal>
            </goals>
          </execution>
        </executions>
      </plugin>
    </plugins>
  </build>
</project>

We are currently in the process of deploying to Maven central.