Skip to content

Commit 2ccbfcf

Browse files
committed
Add filter to only allow compile, runtime or system scoped plugins
1 parent a12f6c2 commit 2ccbfcf

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

maven_plugin/src/main/java/io/github/chains_project/maven_lockfile/FreezeDependencyMojo.java

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -227,7 +227,13 @@ private void updatePlugins(Model pomModel, Set<MavenPlugin> mavenPlugins) {
227227
while (!depQueue.isEmpty()) {
228228
DependencyNode depNode = depQueue.poll();
229229
if (depNode.isIncluded()) {
230-
dependencies.add(toMavenDependency(depNode));
230+
Dependency dep = toMavenDependency(depNode);
231+
String scope = dep.getScope() != null ? dep.getScope() : "compile";
232+
233+
// Plugin dependencies can only have scope: compile, runtime, or system
234+
if (scope.equals("compile") || scope.equals("runtime") || scope.equals("system")) {
235+
dependencies.add(dep);
236+
}
231237
}
232238
depQueue.addAll(depNode.getChildren());
233239
}

0 commit comments

Comments
 (0)