Skip to content
Snippets Groups Projects
avatar
smartdatalab/public/ci-cd-components/maven
Maven 4.3.0

gitlab-ci-maven

include:
  - component: $CI_SERVER_FQDN/smartdatalab/public/ci-cd-components/maven/gitlab-ci-maven@4.3.0
Inputs
Name
Mandatory
Type
Description
Default
optsfalsestring[Global Maven options](http://maven.apache.org/configure.html#maven_opts-environment-variable)-Dhttps.protocols=TLSv1.2 -Dmaven.repo.local=${MAVEN_CFG_DIR}/repository -Dorg.slf4j.simpleLogger.showDateTime=true -Djava.awt.headless=true
imagefalsestringThe Docker image used to run Maven - **set the version required by your project**registry.hub.docker.com/library/maven:latest
cfg-dirfalsestringThe Maven configuration directory.m2
cli-optsfalsestringAdditional [Maven options](https://maven.apache.org/ref/3-LATEST/maven-embedder/cli.html) used on the command line--no-transfer-progress --batch-mode --errors --fail-at-end --show-version -DinstallAtEnd=true -DdeployAtEnd=true
build-argsfalsestringMaven arguments for the build & test joborg.jacoco:jacoco-maven-plugin:prepare-agent verify org.jacoco:jacoco-maven-plugin:report
deploy-argsfalsestringMaven arguments for the deploy jobdeploy -Dmaven.test.skip=true
project-dirfalsestringMaven project root directory.
release-argsfalsestringMaven arguments for the release jobrelease:prepare -DtagNameFormat=@{project.version} -Darguments=-Dmaven.test.skip=true
sbom-disabledfalsebooleanDisable Software Bill of Materialsfalse
sbom-gen-argsfalsestringMaven command used for SBOM analysisorg.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom
settings-filefalsestringThe Maven `settings.xml` file path$MAVEN_CFG_DIR/settings.xml
deploy-enabledfalsebooleanEnable Publishfalse
sonar-host-urlfalsestringSonarQube server url
release-versionfalsestringExplicit version to use when triggering a release _Otherwise uses the current snapshot version from `pom.xml`)_
sonar-base-argsfalsestringSonarQube [analysis arguments](https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/analysis-parameters/)sonar:sonar -Dsonar.links.homepage=${CI_PROJECT_URL} -Dsonar.links.ci=${CI_PROJECT_URL}/-/pipelines -Dsonar.links.issue=${CI_PROJECT_URL}/-/issues
mvn-sbom-job-tagsfalsearraytags to filter applicable runners for mvn-sbom job[]
mvn-build-job-tagsfalsearraytags to filter applicable runners for mvn-build job[]
mvn-sonar-job-tagsfalsearraytags to filter applicable runners for mvn-sonar job[]
mvn-release-job-tagsfalsearraytags to filter applicable runners for mvn-release job[]
dependency-check-argsfalsestringMaven arguments for Dependency Check joborg.owasp:dependency-check-maven:aggregate -DretireJsAnalyzerEnabled=false -DassemblyAnalyzerEnabled=false -Dformats=HTML,JSON,XML
release-scm-dev-commentfalsestringMaven release plugin [scmDevelopmentCommitComment](https://maven.apache.org/maven-release/maven-release-plugin/prepare-mojo.html#scmDevelopmentCommitComment) parameter (since Maven `3.0.0-M1`)
dependency-check-disabledfalsebooleanDisable Dependency-Checkfalse
release-scm-comment-prefixfalsestringMaven release plugin [scmCommentPrefix](https://maven.apache.org/maven-release/maven-release-plugin/prepare-mojo.html#scmCommentPrefix) parameterchore(maven-release):
sonar-quality-gate-enabledfalsebooleanEnables SonarQube [Quality Gate](https://docs.sonarsource.com/sonarqube-server/latest/instance-administration/analysis-functions/quality-gates/) verification. _Uses `sonar.qualitygate.wait` parameter ([see doc](https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/ci-integration/overview/#quality-gate-fails))._false
mvn-deploy-release-job-tagsfalsearraytags to filter applicable runners for mvn-deploy-release job[]
mvn-semrel-release-disabledfalsestringDisable semantic-release integration
release-scm-release-commentfalsestringMaven release plugin [scmReleaseCommitComment](https://maven.apache.org/maven-release/maven-release-plugin/prepare-mojo.html#scmReleaseCommitComment) parameter (since Maven `3.0.0-M1`)
mvn-deploy-snapshot-job-tagsfalsearraytags to filter applicable runners for mvn-deploy-snapshot job[]
mvn-dependency-check-job-tagsfalsearraytags to filter applicable runners for mvn-dependency-check job[]
mvn-no-snapshot-deps-job-tagsfalsearraytags to filter applicable runners for mvn-no-snapshot-deps job[]
deploy-from-unprotected-disabledfalsebooleanSet to limit snapshot publication to protected branchesfalse
deploy-snapshot-with-slug-enabledfalsebooleanEnable to inject the Git branch slug in SNAPSHOT versionsfalse
mvn-forbid-snapshot-dependencies-disabledfalsebooleanDisable Snapshot dependencies verificationfalse

gitlab-ci-maven-vault

include:
  - component: $CI_SERVER_FQDN/smartdatalab/public/ci-cd-components/maven/gitlab-ci-maven-vault@4.3.0
Inputs
Name
Mandatory
Type
Description
Default
vault-base-urlfalsestringThe Vault server base API url
vault-oidc-audfalsestringThe `aud` claim for the JWT$CI_SERVER_URL

gitlab-ci-maven-jib

include:
  - component: $CI_SERVER_FQDN/smartdatalab/public/ci-cd-components/maven/gitlab-ci-maven-jib@4.3.0
Inputs
Name
Mandatory
Type
Description
Default
sbom-optsfalsestringOptions for syft used for SBOM analysis--override-default-catalogers rpm-db-cataloger,alpm-db-cataloger,apk-db-cataloger,dpkg-db-cataloger,portage-cataloger,nix-store-cataloger,java
sbom-imagefalsestringregistry.hub.docker.com/anchore/syft:debug
trivy-argsfalsestringAdditional [`trivy image` options](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_image/#options)--ignore-unfixed --pkg-types os
trivy-imagefalsestringThe docker image used to scan images with Trivyregistry.hub.docker.com/aquasec/trivy:latest
skopeo-imagefalsestringThe image used to publish images with Skopeoquay.io/skopeo/stable:latest
jib-build-argsfalsestring[Jib Maven Plugin arguments](https://github.com/GoogleContainerTools/jib/tree/master/jib-maven-plugin#extended-usage)-Djib.to.image=$MAVEN_JIB_SNAPSHOT_IMAGE
trivy-disabledfalsebooleanDisable Maven Trivyfalse
jib-publish-argsfalsestringAdditional [`skopeo copy` arguments](https://github.com/containers/skopeo/blob/master/docs/skopeo-copy.1.md#options)
jib-release-imagefalsestringMaven Jib Release image$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_NAME
mvn-sbom-job-tagsfalsearraytags to filter applicable runners for mvn-sbom job[]
jib-snapshot-imagefalsestringMaven Jib Snapshot image$CI_REGISTRY_IMAGE/snapshot:$CI_COMMIT_REF_SLUG
mvn-build-job-tagsfalsearraytags to filter applicable runners for mvn-build job[]
mvn-trivy-job-tagsfalsearraytags to filter applicable runners for mvn-trivy job[]
jib-prod-publish-strategyfalsestringDefines the publish to production strategy.manual
mvn-deploy-release-job-tagsfalsearraytags to filter applicable runners for mvn-deploy-release job[]
mvn-deploy-snapshot-job-tagsfalsearraytags to filter applicable runners for mvn-deploy-snapshot job[]