pyrox.dev
dependency-track: init at 4.11.7
authored by Alexander Sieg and committed by Alexander Sieg dea22392 0211e5ea
+44
pkgs/by-name/de/dependency-track/0000-remove-frontend-download.patch
+44
pkgs/by-name/de/dependency-track/0000-remove-frontend-download.patch
···
1
+
diff --git a/pom.xml b/pom.xml
2
+
index 9988e765..906917c0 100644
3
+
--- a/pom.xml
4
+
+++ b/pom.xml
5
+
@@ -660,38 +660,13 @@
6
+
<artifactId>maven-antrun-plugin</artifactId>
7
+
<version>3.1.0</version>
8
+
<executions>
9
+
- <execution>
10
+
- <id>frontend-download</id>
11
+
- <phase>prepare-package</phase>
12
+
- <configuration>
13
+
- <target>
14
+
- <get src="https://github.com/DependencyTrack/frontend/releases/download/${frontend.version}/frontend-dist.zip" dest="${project.build.directory}" verbose="true"/>
15
+
- </target>
16
+
- </configuration>
17
+
- <goals>
18
+
- <goal>run</goal>
19
+
- </goals>
20
+
- </execution>
21
+
- <execution>
22
+
- <id>frontend-extract</id>
23
+
- <phase>prepare-package</phase>
24
+
- <configuration>
25
+
- <target>
26
+
- <unzip src="${project.build.directory}/frontend-dist.zip" dest="${project.build.directory}/frontend">
27
+
- </unzip>
28
+
- </target>
29
+
- </configuration>
30
+
- <goals>
31
+
- <goal>run</goal>
32
+
- </goals>
33
+
- </execution>
34
+
<execution>
35
+
<id>frontend-resource-deploy</id>
36
+
<phase>prepare-package</phase>
37
+
<configuration>
38
+
<target>
39
+
<copy todir="${project.build.directory}/${project.artifactId}">
40
+
- <fileset dir="${project.build.directory}/frontend/dist">
41
+
+ <fileset dir="${project.basedir}/frontend/dist">
42
+
<include name="**/*"/>
43
+
</fileset>
44
+
</copy>
+17
pkgs/by-name/de/dependency-track/0001-add-junixsocket.patch
+17
pkgs/by-name/de/dependency-track/0001-add-junixsocket.patch
···
1
+
diff --git a/pom.xml b/pom.xml
2
+
index 9988e765..f69576b4 100644
3
+
--- a/pom.xml
4
+
+++ b/pom.xml
5
+
@@ -457,6 +457,12 @@
6
+
<version>${lib.testcontainers.version}</version>
7
+
<scope>test</scope>
8
+
</dependency>
9
+
+ <dependency>
10
+
+ <groupId>com.kohlschutter.junixsocket</groupId>
11
+
+ <artifactId>junixsocket-core</artifactId>
12
+
+ <version>2.10.0</version>
13
+
+ <type>pom</type>
14
+
+ </dependency>
15
+
</dependencies>
16
+
17
+
<build>
+109
pkgs/by-name/de/dependency-track/package.nix
+109
pkgs/by-name/de/dependency-track/package.nix
···
1
+
{
2
+
lib,
3
+
buildNpmPackage,
4
+
fetchFromGitHub,
5
+
jre_headless,
6
+
cyclonedx-cli,
7
+
makeWrapper,
8
+
maven,
9
+
nix-update-script,
10
+
}:
11
+
let
12
+
version = "4.11.7";
13
+
14
+
frontend = buildNpmPackage {
15
+
pname = "dependency-track-frontend";
16
+
inherit version;
17
+
18
+
src = fetchFromGitHub {
19
+
owner = "DependencyTrack";
20
+
repo = "frontend";
21
+
rev = version;
22
+
hash = "sha256-hgBDzzG90gunnlZeektzdBIdatNjbkDVmNLbxjyxAXE=";
23
+
};
24
+
25
+
npmDepsHash = "sha256-veyt7fn4g/eh/+2CapQxlEssZP8cQXONpI6sSW299tk=";
26
+
forceGitDeps = true;
27
+
makeCacheWritable = true;
28
+
29
+
# The prepack script runs the build script, which we'd rather do in the build phase.
30
+
npmPackFlags = [ "--ignore-scripts" ];
31
+
};
32
+
in
33
+
34
+
maven.buildMavenPackage rec {
35
+
inherit version;
36
+
pname = "dependency-track";
37
+
38
+
src = fetchFromGitHub {
39
+
owner = "DependencyTrack";
40
+
repo = "dependency-track";
41
+
rev = version;
42
+
hash = "sha256-BMkn9WnUGs4RxH5I1QQ2UDrlo32JcbfjfFcOG5YogLI=";
43
+
};
44
+
45
+
patches = [
46
+
./0000-remove-frontend-download.patch
47
+
./0001-add-junixsocket.patch
48
+
];
49
+
50
+
mvnJdk = jre_headless;
51
+
mvnHash = "sha256-c/JwBiKsXuWbCm1dTCrVc+V/1G7Eii1mUW8xDyewyLs=";
52
+
manualMvnArtifacts = [ "com.coderplus.maven.plugins:copy-rename-maven-plugin:1.0.1" ];
53
+
buildOffline = true;
54
+
55
+
mvnDepsParameters = lib.escapeShellArgs [
56
+
"-Dmaven.test.skip=true"
57
+
"-P enhance"
58
+
"-P embedded-jetty"
59
+
];
60
+
61
+
mvnParameters = lib.escapeShellArgs [
62
+
"-Dmaven.test.skip=true"
63
+
"-P enhance"
64
+
"-P embedded-jetty"
65
+
"-P bundle-ui"
66
+
"-Dservices.bom.merge.skip=false"
67
+
"-Dlogback.configuration.file=${src}/src/main/docker/logback.xml"
68
+
"-Dcyclonedx-cli.path=${lib.getExe cyclonedx-cli}"
69
+
];
70
+
71
+
preBuild = ''
72
+
mkdir -p frontend
73
+
cp -r ${frontend}/lib/node_modules/@dependencytrack/frontend/dist frontend/
74
+
'';
75
+
76
+
afterDepsSetup = ''
77
+
mvn cyclonedx:makeBom -Dmaven.repo.local=$mvnDeps/.m2 \
78
+
org.codehaus.mojo:exec-maven-plugin:exec@merge-services-bom
79
+
'';
80
+
81
+
doCheck = false;
82
+
83
+
nativeBuildInputs = [ makeWrapper ];
84
+
85
+
installPhase = ''
86
+
runHook preInstall
87
+
88
+
install -Dm644 target/dependency-track-*.jar $out/share/dependency-track/dependency-track.jar
89
+
makeWrapper ${jre_headless}/bin/java $out/bin/dependency-track \
90
+
--add-flags "-jar $out/share/dependency-track/dependency-track.jar"
91
+
92
+
runHook postInstall
93
+
'';
94
+
95
+
passthru = {
96
+
# passthru for nix-update
97
+
inherit (frontend) npmDeps;
98
+
updateScript = nix-update-script { };
99
+
};
100
+
101
+
meta = {
102
+
description = "Intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain";
103
+
homepage = "https://github.com/DependencyTrack/dependency-track";
104
+
license = lib.licenses.asl20;
105
+
maintainers = lib.teams.cyberus.members;
106
+
mainProgram = "dependency-track";
107
+
inherit (jre_headless.meta) platforms;
108
+
};
109
+
}