feat: SCA-57 add maven flag to dfscan

Author: iseki0

api/create_sub_task.go

@@ -31,6 +31,10 @@ type CreateSubTaskRequest struct {
 	ExtraData          *string          `json:"extra_data,omitempty"`
 	IsAutonomous       bool             `json:"is_autonomous"`
 	Distribution       string           `json:"distribution"`
+	BuildOptions       struct {
+		MavenVersion string `json:"maven_version,omitempty"`
+		JdkVersion   string `json:"jdk_version,omitempty"`
+	} `json:"build_options"`
 }
 
 type CreateSubTaskResponse struct {

api/start_check.go

@@ -1,6 +1,9 @@
 package api
 
-import "github.com/murphysecurity/murphysec/model"
+import (
+	"github.com/murphysecurity/murphysec/model"
+	"github.com/murphysecurity/murphysec/toolver"
+)
 
 func StartCheck(client *Client, task *model.ScanTask) error {
 	checkNotNull(client)
@@ -12,5 +15,19 @@ func StartCheck(client *Client, task *model.ScanTask) error {
 	if task.MavenSourceId != "" {
 		data["package_private_id"] = task.MavenSourceId
 	}
+	var buildOptions = make(map[string]any)
+	data["build_options"] = buildOptions
+	if toolver.Default.Maven.MavenVersion != "" {
+		buildOptions["maven_version"] = "jdk" + toolver.Default.Maven.MavenVersion
+	}
+	if toolver.Default.Maven.JdkVersion != "" {
+		buildOptions["jdk_version"] = "maven" + toolver.Default.Maven.JdkVersion
+	}
+	if len(toolver.Default.Maven.AdditionalArgs) > 0 {
+		buildOptions["arguments"] = toolver.Default.Maven.AdditionalArgs
+	}
+	if len(toolver.Default.Maven.AdditionalPrependArgs) > 0 {
+		buildOptions["prepend_arguments"] = toolver.Default.Maven.AdditionalPrependArgs
+	}
 	return client.DoJson(client.PostJson(joinURL(client.baseUrl, "/platform3/v3/client/start_check"), data), nil)
 }

cmd/murphy/internal/scan/cmd.go

@@ -74,6 +74,10 @@ func Cmd() *cobra.Command {
 	c.Flags().StringVar(&extraData, "extra-data", "", "specify the extra data")
 	c.Flags().BoolVar(&scanCodeHash, "scan-snippets", false, "Enable scanning of code snippets to detect SBOM and  vulnerabilities. Disabled by default")
 	c.Flags().BoolVar(&binaryOnly, "binary-only", false, "only scan binary files, skip source code scanning")
+	c.Flags().StringArrayVar(&toolver.Default.Maven.AdditionalPrependArgs, "maven-prepend-arg", []string{}, "Prepend an argument to the Maven command. Can be specified multiple times.")
+	c.Flags().StringArrayVar(&toolver.Default.Maven.AdditionalArgs, "maven-arg", []string{}, "Append an argument to the Maven command. Can be specified multiple times.")
+	c.Flags().StringVar(&toolver.Default.Maven.JdkVersion, "maven-jdk", "", "specify JDK version for Maven build")
+	c.Flags().StringVar(&toolver.Default.Maven.MavenVersion, "maven-version", "", "specify Maven version for Maven build")
 	return &c
 }