- scanner now uses scancode service

- removed extract inventory from pom (deprecated)
- updated release workflow

Author: jonasfuegen

.github/workflows/release.yml

@@ -62,9 +62,17 @@ jobs:
             .mirror
             .maven-index
 
+      - name: Install Maven
+        run: |
+          MVN_VER=3.9.11
+          wget -q https://downloads.apache.org/maven/maven-3/${MVN_VER}/binaries/apache-maven-${MVN_VER}-bin.tar.gz
+          sudo tar -xzf apache-maven-${MVN_VER}-bin.tar.gz -C /opt/
+          sudo mv /opt/apache-maven-${MVN_VER} /opt/maven
+          echo "/opt/maven/bin" >> "$GITHUB_PATH"
+
       - name: Run tests
         shell: bash
-        run: |
+        run: |          
           ./tests/scripts/pipelines/run_workspace-001.sh
           ./tests/scripts/pipelines/run_workspace-002.sh
 

processors/extract/extract_inventory-from-pom.md

@@ -1,8 +1,7 @@
 # Mirror - Update Index external
 
 This processor created or updates the indices of the mirror. It uses the previously downloaded data files of the
-external data sources. As a result the specified mirror directory is extended by the index files. The main difference to
-the processor [extract_inventory-from-pom](../extract/extract_inventory-from-pom.md) is that some advisories are excluded.
+external data sources. As a result the specified mirror directory is extended by the index files.
 
 ## Properties
 

processors/extract/extract_inventory-from-pom.xml

@@ -14,8 +14,3 @@ of this repository.
 | output.inventory.file              | yes      | The scanned output inventory file path.                                                                                        |
 | input.output.analysis.base.dir     | yes      | The directory in which the scanner caches information on artifacts. Increases speed drastically between multiple scanner runs. |
 | input.properties.file              | yes      | Yaml file containing properties to configure the scanners behaviour.                                                           |
-
-### Environment
-| Property                      | Required | Explanation                                                                                                                    |
-|-------------------------------|----------|--------------------------------------------------------------------------------------------------------------------------------|
-| env.scancode.binary.file      | yes      | The path where the ScanCode Toolkit is installed.                                                                              |

processors/mirror/mirror_update-index_external.md

@@ -82,9 +82,6 @@
                                 <requireProperty>
                                     <property>input.properties.file</property>
                                 </requireProperty>
-                                <requireProperty>
-                                    <property>env.scancode.binary.file</property>
-                                </requireProperty>
                             </rules>
                             <fail>true</fail>
                         </configuration>

processors/scan/scan_scan-inventory.md

@@ -3,5 +3,5 @@
 export INPUT_INVENTORY_FILE="$WORKSPACE_001_DIR/sample-product-1.0.0/01_assets/example-001.xlsx"
 export OUTPUT_INVENTORY_FILE="$RESOLVED_DIR_001/example-001-resolved.xlsx"
 export DOWNLOAD_BASE_DIR="$KONTINUUM_DIR/.maven-index"
-export ARTIFACT_RESOLVER_CONFIG="$INTERNAL_WORKBENCH_DIR/configs/resolver/artifact-resolver-config.yaml"
-export PROXY_CONFIG="$INTERNAL_WORKBENCH_DIR/configs/resolver/artifact-resolver-proxy.yaml"
+export ARTIFACT_RESOLVER_CONFIG="$EXTERNAL_WORKBENCH_DIR/config/resolver/artifact-resolver-config.yaml"
+export PROXY_CONFIG="$EXTERNAL_WORKBENCH_DIR/config/resolver/artifact-resolver-proxy.yaml"