fix: upgrade mvn-plugin to handle jar scanning sha-not-found error

snyk · Nov 21, 2024 · c8f5969 · c8f5969
1 parent 71c1b7f
commit c8f5969
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 8 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -120,7 +120,7 @@
     "snyk-go-plugin": "1.23.0",
     "snyk-gradle-plugin": "4.7.0",
     "snyk-module": "3.1.0",
-    "snyk-mvn-plugin": "3.6.0",
+    "snyk-mvn-plugin": "3.6.1",
     "snyk-nodejs-lockfile-parser": "1.58.10",
     "snyk-nodejs-plugin": "1.3.4",
     "snyk-nuget-plugin": "2.7.12",

diff --git a/test/fixtures/maven-jars/mvn-app-1.0-SNAPSHOT.jar b/test/fixtures/maven-jars/mvn-app-1.0-SNAPSHOT.jar
diff --git a/test/jest/acceptance/snyk-sbom/maven-options.spec.ts b/test/jest/acceptance/snyk-sbom/maven-options.spec.ts
@@ -67,6 +67,17 @@ describe('snyk sbom: maven options (mocked server only)', () => {
     );
   });
 
+  test('`sbom --scan-unmanaged --file=<NAME>` fails to generate an SBOM for user defined JAR file', async () => {
+    const sbom = await runSnykSbomCliCycloneDxJsonForFixture(
+      'maven-jars',
+      '--scan-unmanaged --file=mvn-app-1.0-SNAPSHOT.jar',
+      env,
+    );
+
+    expect(sbom.metadata.component.name).toMatch(/^snyk-test-maven-jars-/);
+    expect(sbom.components.length).toBe(2);
+  });
+
   test('`sbom --scan-unmanaged --file=<NAME>` generates an SBOM for the specific JAR file', async () => {
     const sbom = await runSnykSbomCliCycloneDxJsonForFixture(
       'maven-jars',