Skip to content

Add Gradle contextual analysis support - #418

Open
omribz156 wants to merge 1 commit into
jfrog:mainfrom
omribz156:codex/gradle-contextual-analysis
Open

Add Gradle contextual analysis support#418
omribz156 wants to merge 1 commit into
jfrog:mainfrom
omribz156:codex/gradle-contextual-analysis

Conversation

@omribz156

Copy link
Copy Markdown

Summary:

  • include Gradle in the repository-config package types that keep vuln_contextual_analysis in API payloads and state
  • update the Gradle acceptance-test fixture to exercise vuln_contextual_analysis
  • update the checked-in repository config docs to list Gradle support

This follows the existing Gradle JFrog Advanced Security support gate used for exposures/secrets scans.

Verification:

  • gofmt -w pkg/xray/resource/resource_xray_repository_config.go pkg/xray/resource/resource_xray_repository_config_test.go
  • git diff --check
  • go test ./pkg/xray/resource -run TestDoesNotExist -count=0
  • go test ./pkg/xray/resource -run TestAccRepositoryConfig_RepoConfig_Create_VulnContextualAnalysis -count=1 -v (skips without JFROG_JAS_DISABLED=false, as expected for this acceptance test)

Note: I also tried go generate ./..., but it could not complete because tfplugindocs was unable to download Terraform after checksum signature verification failed with openpgp: key expired.

Fixes #416.

Implemented with Codex assistance; I reviewed the issue, source references, and final diff manually before opening this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug Report: xray_repository_config missing contextual analysis for gradle repositories

1 participant