feat: add pipeline specialized in Maven package scan - #1953

Merged

tdruez merged 113 commits into

mainfrom

1763_pipeline_for_maven

Jul 29, 2026

Commits on Nov 12, 2025

Add "scan_maven_package" pipeline (Working-in-progress) #1763
chinyeungli
committed
9e93317

Commits on Nov 14, 2025

Refactor code and add tests #1763
chinyeungli
committed
13e8e88

Commits on Nov 17, 2025

Implement "update_package_license_from_resource_if_missing" function #1763
chinyeungli
committed
cb623c1

Commits on Nov 18, 2025

Commits on Nov 19, 2025

Add "maven.google.com" as a maven_hosts and accept .aar file #1763
chinyeungli
committed
f303430

Commits on Nov 26, 2025

Reorganize code structure and code enhancement #1763
chinyeungli
committed
ab71751
Update build-in-pipelines.rst #1763
chinyeungli
committed
5579db8

Commits on Dec 22, 2025

Merge remote-tracking branch 'origin/main' into 1763_pipeline_for_maven
chinyeungli
committed
9ed4c2d

Commits on Dec 29, 2025

Commits on Dec 31, 2025

Error handling if pom url not found #1763
chinyeungli
committed
4f1b4d3

Commits on May 25, 2026

Prevent duplicate CodebaseRelation entries #1763
chinyeungli
committed
6fffa2c

Commits on Jun 18, 2026

Update minecode pipelines with stable release v0.1.1 (#2013)

AyanSinhaMahapatra
authored and
chinyeungli
committed
ee673f1
Fix typos in docstrings for pathmap.py (#1985)

pranavkeerti66-hue
authored and
chinyeungli
committed
257560c
Store the whole vulnerability data from cdx to local models (#2007)

tdruez
authored and
chinyeungli
committed
3124455
Add project vulnerability list view (#2018)

tdruez
authored and
chinyeungli
committed
9e2b2bc
feat: Improve class file mapping #2021
chinyeungli
committed
c602e9d
Update index.rst with new structure

DennisClark
authored and
chinyeungli
committed
3bd3112
Fix index page issues

AyanSinhaMahapatra
authored and
chinyeungli
committed
395a906
Update README.rst to improve structure

DennisClark
authored and
chinyeungli
committed
6b03c2d
Update to scancode-toolkit v32.5.0 (#2000)

AyanSinhaMahapatra
authored and
chinyeungli
committed
aeb6f3c
exclude github folder from deploy resource

Aryan-SINGH-GIT
authored and
chinyeungli
committed
1602d6a
removing unnecessary git stat

Aryan-SINGH-GIT
authored and
chinyeungli
committed
5406ece
reformat file

Aryan-SINGH-GIT
authored and
chinyeungli
committed
96535de
adding github in deployed_resource_path_exclusions

Aryan-SINGH-GIT
authored and
chinyeungli
committed
d09aa27
chore: upgrade django to version 6.x (#2052)

tdruez
authored and
chinyeungli
committed
e0d7391
fix: upgrade python in the rtd config file (#2053)

tdruez
authored and
chinyeungli
committed
bdc592c
Match MacOS binary symbols to Go TypeScript symbols (#2056)

AyanSinhaMahapatra
authored and
chinyeungli
committed
7d23536
Bump android_inspector to v0.2.0 (#2069)

keshav-space
authored and
chinyeungli
committed
706dbe5
chore: automatically closes low-quality and AI slop PRs (#2072)

tdruez
authored and
chinyeungli
committed
0adfb1e
chore: upgrade RQ, Redis, and more to their latest version (#2073)

tdruez
authored and
chinyeungli
committed
c9be588
chore: upgrade Django and Redis to their latest version

tdruez
authored and
chinyeungli
committed
3387a47
fix: failing test by updating the expectation fixture (#2084)

tdruez
authored and
chinyeungli
committed
ac1331a
chore: upgrade Django to latest version (#2085)

tdruez
authored and
chinyeungli
committed
621d890
feat: remove the chown service in compose file (#2086)

tdruez
authored and
chinyeungli
committed
2216bf2
fix: URL-encode programming language filter values in resource list (#2079)

uttam282005
authored and
chinyeungli
committed
e541b86
fix: rename "Grammar" optional step group to "Antlr" in d2d pipeline (#2059)

Monal-Reddy
authored and
chinyeungli
committed
492b693
feat!: replace plain-text DRF token with PBKDF2-hashed API token (#2087)

tdruez
authored and
chinyeungli
committed
1f1e74c
chore: set explicit workflow permissions and pin down actions (#2090)

tdruez
authored and
chinyeungli
committed
beb1807
chore: bump version to v37.0.0 for release (#2091)

tdruez
authored and
chinyeungli
committed
13ab091
fix: add the checkout step to pypi release workflow

tdruez
authored and
chinyeungli
committed
edf44da
chore: refine gh workflows for security and consistency

tdruez
authored and
chinyeungli
committed
44371f6
feat: display scio and toolkit versions in place of django version (#2101)

tdruez
authored and
chinyeungli
committed
40e45a5
fix missing space in scan_max_file_size help text (#2097)

rishabh23rohil
authored and
chinyeungli
committed
cf25704
feat: add tests for chunked and get_purls utilities (#2100)

rishabh23rohil
authored and
chinyeungli
committed
e13b78f
feat: display layers information (created_by, comment) in tree view (#2102)

tdruez
authored and
chinyeungli
committed
85ea093
feat: enhance the global HTML structure (#2103)

tdruez
authored and
chinyeungli
committed
0cd684f
feat: remove the need for context processor and improve base template (#2106)

tdruez
authored and
chinyeungli
committed
e1a47cd
chore: remove the PR quality workflow

tdruez
authored and
chinyeungli
committed
827b545
chore: upgrade the scancode-action to latest version (pinned deps) (#2124)

tdruez
authored and
chinyeungli
committed
c8f0707
fix: XSS and duplicate file detection in file upload UI (#2129)

tdruez
authored and
chinyeungli
committed
925cd15
fix: incomplete URL sanitization for Slack webhook detection (#2130)

tdruez
authored and
chinyeungli
committed
b5298f7
chore: correct typo in `pipes/clamav` (#2121)

OmAnand857
authored and
chinyeungli
committed
6e04d0e
feat: is_safe_url to mitigate SSRF in URL requests (#2131)

tdruez
authored and
chinyeungli
committed
5110b1f
feat: add search to resource tree (#2114)

aayushkdev
authored and
chinyeungli
committed
9582fb6
feat: enhance tree search rendering and implementation (#2133)

tdruez
authored and
chinyeungli
committed
500fdcf
feat: use uv and uv.lock for reproducible builds in Docker image (#2134)

tdruez
authored and
chinyeungli
committed
b10d157
fix: add support for sqlite in the apitoken data migration (#2138)

tdruez
authored and
chinyeungli
committed
5ed4a74
feat!: convert Dockerfile to multi-stage build (#2139)

tdruez
authored and
chinyeungli
committed
56db41d
chore: bump version to v37.1.0 for release (#2140)

tdruez
authored and
chinyeungli
committed
47a761f
chore: upgrade scancode-action to docker base v0.1 release (#2141)

tdruez
authored and
chinyeungli
committed
62dc6a1
feat: add "base" Docker build stage (#2142)

tdruez
authored and
chinyeungli
committed
d120a2d
fix: fallback to license_declared when loading SPDX SBOM (#2144)

tdruez
authored and
chinyeungli
committed
5c63602
feat!: Switch development workflow from local venv to Docker Compose (#2145)

tdruez
authored and
chinyeungli
committed
21722fb
fix: relax validation for non-HTTP URLs (#2147)

tdruez
authored and
chinyeungli
committed
7c6c343
fix: load the .env in the Docker dev compose (#2149)

tdruez
authored and
chinyeungli
committed
dc151c4
chore: upgrade Django and cryptography to latest version (#2150)

tdruez
authored and
chinyeungli
committed
eb1a3ab
fix: replace the hardcoded /var/www/html by named volume (#2160)

tdruez
authored and
chinyeungli
committed
fedf5ad
chore: bump minecode-pipelines version to 1.0.0 (#2170)

JonoYang
authored and
chinyeungli
committed
d3f82a2
chore: update minecode-pipelines version to 1.0.1 (#2171)

JonoYang
authored and
chinyeungli
committed
39ac66f
Install Java and jadx in Dockerfile #1812 (#2174)

authored and
chinyeungli
committed
d34bda9
chore: upgrade dependencies (#2173)

tdruez
authored and
chinyeungli
committed
c3a0797
chore: bump version to v37.2.0 for release (#2175)

tdruez
authored and
chinyeungli
committed
4e7401c
fix: add setup-buildx step to enable GHA cache support (#2176)

tdruez
authored and
chinyeungli
committed
16ffc08
fix: add latest-full tag and OCI annotations to Docker publish workflow

tdruez
authored and
chinyeungli
committed
cfde610

Commits on Jun 21, 2026

Change the text files #1763
chinyeungli
committed
13d7d2a

Commits on Jun 29, 2026

Commits on Jul 14, 2026

chore: refine dev compose file

tdruez
authored and
chinyeungli
committed
edcdc35
feat: render the compliance alert value as a colored label (#2186)

tdruez
authored and
chinyeungli
committed
f9c8f68
feat: add pipeline availability check with disabled state in UI (#2188)

tdruez
authored and
chinyeungli
committed
8f6fcb8
feat: replace django-taggit with a plain Project.labels JSONField (#2189)

tdruez
authored and
chinyeungli
committed
2abcc07
feat: move scanpipe settings to local settings.py with lazy resolution (#2187)

tdruez
authored and
chinyeungli
committed
263275e
fix: ClamAV scan crash on codebase root directory (#2190)

tdruez
authored and
chinyeungli
committed
60e9098
chore: upgrade vulnerable dependencies (#2191)

tdruez
authored and
chinyeungli
committed
5c1f7f4
Refactor code structure for Maven pipeline #1763
chinyeungli
committed
e26b3ae
Add more comments #1763
chinyeungli
committed
c77c169
Add the missing import settings #1763
chinyeungli
committed
52eaf65
Merge branch 'main' into 1763_pipeline_for_maven
chinyeungli
authored
8514b77
Add the missing import settings #1763
chinyeungli
committed
4066b85
Update tests #1763
chinyeungli
committed
a7cadde
Skip test_scanpipe_scan_maven_package_single_file on macos #1763
chinyeungli
committed
9516d88

Commits on Jul 15, 2026

Better code organization #1763
chinyeungli
committed
f018823
Remove non-used code #1763
chinyeungli
committed
8e83344

Commits on Jul 16, 2026

Restore license notice and code enhancement #1763
chinyeungli
committed
131f84b
Apply suggestion from @tdruez

chinyeungli
and
tdruez
authored
f3401de
Code enhancement based on the PR review comments #1763
chinyeungli
committed
96b9334

Commits on Jul 17, 2026

Better code structure and added tests #1763
chinyeungli
committed
2631c80

Commits on Jul 20, 2026

Clean up code and improve formatting #1763
chinyeungli
committed
91120ae
Update scanpipe/pipes/maven.py

chinyeungli
and
tdruez
authored
f2a7e3b

Commits on Jul 22, 2026

Re-order the pipelines order #1763
chinyeungli
committed
f479350

Commits on Jul 23, 2026

Refactor Maven pipeline for error handling and performance #1763
chinyeungli
committed
90c71dd
Fix code/doc formatting #1763
chinyeungli
committed
62a29ac

Commits on Jul 29, 2026

Use PurePosixPath for file checking #1763
chinyeungli
committed
895b1ce