Exclude META-INF/maven from shaded libraries (#4040)

trask · web-flow · commit a874c5e8bce4 · 2025-01-22T18:18:30.000Z
diff --git a/agent/agent/build.gradle.kts b/agent/agent/build.gradle.kts
@@ -207,6 +207,9 @@ fun CopySpec.isolateClasses(jars: Iterable<File>) {
       rename("^(.*)\\.class\$", "\$1.classdata")
       // Rename LICENSE file since it clashes with license dir on non-case sensitive FSs (i.e. Mac)
       rename("""^LICENSE$""", "LICENSE.renamed")
+      // excluding pom.xml files that are embedded in several dependencies
+      // in order to avoid false positives from security scanners
+      exclude("META-INF/maven/**")
     }
   }
   from("${rootProject.projectDir}/LICENSE") {

Original file line number	Diff line number	Diff line change
`@@ -207,6 +207,9 @@ fun CopySpec.isolateClasses(jars: Iterable<File>) {`
`207`	`207`	`rename("^(.*)\\.class\$", "\$1.classdata")`
`208`	`208`	`// Rename LICENSE file since it clashes with license dir on non-case sensitive FSs (i.e. Mac)`
`209`	`209`	`rename("""^LICENSE$""", "LICENSE.renamed")`
	`210`	`+ // excluding pom.xml files that are embedded in several dependencies`
	`211`	`+ // in order to avoid false positives from security scanners`
	`212`	`+ exclude("META-INF/maven/**")`
`210`	`213`	`}`
`211`	`214`	`}`
`212`	`215`	`from("${rootProject.projectDir}/LICENSE") {`