Uploaded image for project: 'Migration Toolkit for Applications'
  1. Migration Toolkit for Applications
  2. MTA-2973

Analyzing in Source mode without a Maven Settings credential produces different results

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • Critical
    • No

      Description of problem:

      Analyzing the tackle-testapp-public with and without an associated Maven settings credential produces drastically different results. Custom rules are not being triggered and some false positives are obtained when analyzing without the Maven settings credential.

      On top of that, only direct dependencies are being displayed on the dependencies view, and links to Maven Central are not being rendered in the Version column for the given application.

      Version-Release number of selected component (if applicable):

      MTA 7.0.3

      How reproducible:

      Always

      Steps to Reproduce:

      1. Create two applications pointing to the same repository: https://github.com/konveyor/tackle-testapp-public
      2. Create a Maven settings credential following the instructions in https://github.com/konveyor/tackle-testapp-public?tab=readme-ov-file#building-the-application
      3. Assign that Maven Settings credential to only one of those applications.
      4. Run individual analyses of both applications with the following config:

      Actual results:

      The custom rule is not triggered in the application with no Maven settings credential. False positives for "File system - Java IO" and "Methods in `sun.misc.Unsafe` have been removed" rules are found. Dependencies for that application only include direct dependencies, and links to Maven Central are not rendered when displayed.

      Expected results:

      Both analyses produce the same results.

      Additional info:

        1. Screenshot from 2024-06-19 12-57-02.png
          130 kB
          Ramon Roman Nissen
        2. Screenshot from 2024-06-19 12-57-16.png
          360 kB
          Ramon Roman Nissen
        3. Screenshot from 2024-06-19 12-57-26.png
          371 kB
          Ramon Roman Nissen
        4. Screenshot from 2024-06-19 12-57-42.png
          197 kB
          Ramon Roman Nissen
        5. Screenshot from 2024-06-19 12-57-57.png
          120 kB
          Ramon Roman Nissen
        6. Screenshot from 2024-07-02 16-58-22.png
          199 kB
          Shveta Sachdeva
        7. Screenshot from 2024-08-01 12-21-09.png
          18 kB
          Karishma Punwatkar

            pgaikwad1@redhat.com Pranav Gaikwad
            rromanni@redhat.com Ramon Roman Nissen
            Karishma Punwatkar Karishma Punwatkar
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: