snyk-mvn-plugin

import { inspect } from 'snyk-mvn-plugin'; import * as path from 'path'; import * as fs from 'fs'; async function runSnykMavenInspection() { const projectRoot = process.cwd(); // Assume running from project root const targetPom = path.join(projectRoot, 'pom.xml'); if (!fs.existsSync(targetPom)) { console.error(`Error: pom.xml not found at ${targetPom}`); console.error('Please ensure you run this from a Maven project root or specify targetFile.'); process.exit(1); } console.log(`Inspecting Maven project at: ${projectRoot}`); console.log(`Using target file: ${targetPom}`); try { const options = { dev: false, // Do not include development dependencies includeProvenance: true, // Generate cryptographic fingerprints for artifacts fingerprintAlgorithm: 'sha256', // Use SHA-256 for fingerprinting // mavenRepository: '/path/to/custom/repo' // Uncomment and adjust if you have a custom local Maven repository }; const result = await inspect(projectRoot, targetPom, options); console.log('Inspection complete.'); console.log(`Found ${result.pkgs ? result.pkgs.length : 0} packages.`); if (result.pkgs && result.pkgs.length > 0 && result.pkgs[0].info.purl) { console.log('First package PURL with checksum:', result.pkgs[0].info.purl); } // Uncomment the line below for full JSON output // console.log(JSON.stringify(result, null, 2)); } catch (error: any) { console.error('Error during inspection:', error.message); process.exit(1); } } runSnykMavenInspection();