Java & Kotlin - Gradle, Maven and Bazel

We support three build automation tools for tracking Java/Kotlin dependencies:

• Gradle
• Maven
• Bazel

Gradle

tl;dr

Check out our Gradle CI templates (opens new window)

For Gradle we support both build.gradle and build.gradle.kts.

For the fastest and most accurate results, a file containing the resolved dependency tree, .debricked-gradle-dependencies.txt, has to be created prior to scanning.

This can be done by running Gradle dependencies command and storing the output in .debricked-gradle-dependencies.txt.

gradle dependencies > .debricked-gradle-dependencies.txt

Every .debricked-gradle-dependencies.txt must be put in the same directory as the corresponding build.gradle or build.gradle.kts.

Check out our Gradle CI templates (opens new window) to set this up.

Warning

In the future, it will be required to upload a .debricked-gradle-dependencies.txt file in order to do a complete scan, including indirect dependencies and dependency relations.

Maven

tl;dr

Check out our Maven CI templates (opens new window)

For Maven we support pom.xml.

For the fastest and most accurate results, a file containing the resolved dependency tree, .debricked-maven-dependencies.tgf, has to be created prior to scanning.

This can be done by running Maven dependency:tree plugin and storing the output in a .debricked-maven-dependencies.tgf file.

mvn dependency:tree -DoutputFile=.debricked-maven-dependencies.tgf -DoutputType=tgf

Every .debricked-maven-dependencies.tgf must be put in the same directory as the corresponding pom.xml.

Check out our Maven CI templates (opens new window) to set this up.

Warning

In the future, it will be required to upload a .debricked-maven-dependencies.tgf file in order to do a complete scan, including indirect dependencies and dependency relations.

Bazel

We also support Java projects using Bazel, where we scan the WORKSPACE file format in addition to any Java file formats being used.

Supported features

Package Manager	Security	License	Health
Bazel	✓	✓	✓
Gradle	✓	✓	✓
Maven	✓	✓	✓

Supported File Formats

Package Manager	File Format	Level of Support *
Bazel	WORKSPACE	3
Gradle	build.gradle build.gradle.kts	3 3
Maven	pom.xml	3