[DROOLS-1216] add enforcer execution which bans blacklisted dependenc…

…ies (#226)
kiegroup · Jun 27, 2016 · 546d86e · 546d86e
1 parent c18936e
commit 546d86e
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -294,6 +294,28 @@
                 </rules>
               </configuration>
             </execution>
+            <execution>
+              <id>ban-blacklisted-dependencies</id>
+              <goals>
+                <goal>enforce</goal>
+              </goals>
+              <phase>validate</phase>
+              <configuration>
+                <rules>
+                  <bannedDependencies>
+                    <excludes combine.children="append">
+                      <!-- Ban blacklisted logging deps (we only use SLF4J + Logback) -->
+                      <!-- In case of transitive dependency, exclude it and use 'org.slf4j:jcl-over-slf4j' instead -->
+                      <exclude>commons-logging:commons-log*</exclude>
+                      <!-- In case of transitive dependency, exclude it and use 'org.slf4j:log4j-over-slf4j' instead -->
+                      <exclude>log4j:log4j</exclude>
+                      <!-- In case of transitive dependency, exclude it and use 'org.javassist:javassist' instead -->
+                      <exclude>javassist:javassist</exclude>
+                    </excludes>
+                  </bannedDependencies>
+                </rules>
+              </configuration>
+            </execution>
           </executions>
         </plugin>
         <plugin>