Commit 02514122 authored by Igor Frenkel's avatar Igor Frenkel Committed by Nick Gaskill

Remove Java additional cert instructions for Dependency Scanning

parent 1a4e2c1a
...@@ -498,42 +498,6 @@ BUNDLER_AUDIT_ADVISORY_DB_REF_NAME: "master" ...@@ -498,42 +498,6 @@ BUNDLER_AUDIT_ADVISORY_DB_REF_NAME: "master"
BUNDLER_AUDIT_ADVISORY_DB_URL: "gitlab.example.com/ruby-advisory-db.git" BUNDLER_AUDIT_ADVISORY_DB_URL: "gitlab.example.com/ruby-advisory-db.git"
``` ```
#### Java (Maven) projects
When using self-signed certificates, add the following job section to the `.gitlab-ci.yml`:
```yaml
gemnasium-maven-dependency_scanning:
variables:
MAVEN_CLI_OPTS: "-s settings.xml -Dmaven.wagon.http.ssl.insecure=true -Dmaven.wagon.http.ssl.allowall=true -Dmaven.wagon.http.ssl.ignore.validity.dates=true"
```
#### Java (Gradle) projects
When using self-signed certificates, add the following job section to the `.gitlab-ci.yml`:
```yaml
gemnasium-maven-dependency_scanning:
before_script:
- echo -n | openssl s_client -connect maven-repo.example.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/internal.crt
- keytool -importcert -file /tmp/internal.crt -cacerts -storepass changeit -noprompt
```
This adds the self-signed certificates of your Maven repository to the Java KeyStore of the analyzer's Docker image.
#### Scala (sbt) projects
When using self-signed certificates, add the following job section to the `.gitlab-ci.yml`:
```yaml
gemnasium-maven-dependency_scanning:
before_script:
- echo -n | openssl s_client -connect maven-repo.example.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/internal.crt
- keytool -importcert -file /tmp/internal.crt -cacerts -storepass changeit -noprompt
```
This adds the self-signed certificates of your Maven repository to the Java KeyStore of the analyzer's Docker image.
#### Python (setuptools) #### Python (setuptools)
When using self-signed certificates for your private PyPi repository, no extra job configuration (aside When using self-signed certificates for your private PyPi repository, no extra job configuration (aside
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment