Validate Maven dependencies for maven-plugins parent pom

2 files changed, 133 insertions, 0 deletions

diff --git a/maven-plugins/allowed-maven-dependencies.txt b/maven-plugins/allowed-maven-dependencies.txt
new file mode 100644
index 00000000000..6a8d1f9b1d6
--- /dev/null
+++ b/maven-plugins/allowed-maven-dependencies.txt
@@ -0,0 +1,95 @@
+# Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
+aopalliance:aopalliance:1.0
+com.fasterxml.jackson.core:jackson-annotations:2.13.4
+com.fasterxml.jackson.core:jackson-core:2.13.4
+com.fasterxml.jackson.core:jackson-databind:2.13.4.2
+com.google.errorprone:error_prone_annotations:2.2.0
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.1-jre
+com.google.inject:guice:4.2.3:no_aop
+com.google.j2objc:j2objc-annotations:1.1
+commons-io:commons-io:2.5
+commons-io:commons-io:2.6
+commons-io:commons-io:2.7
+javax.annotation:javax.annotation-api:1.2
+javax.annotation:jsr250-api:1.0
+javax.enterprise:cdi-api:1.0
+javax.inject:javax.inject:1
+junit:junit:4.13.2
+net.bytebuddy:byte-buddy:1.11.19
+net.bytebuddy:byte-buddy-agent:1.11.19
+org.apache.commons:commons-compress:1.21
+org.apache.commons:commons-lang3:3.5
+org.apache.commons:commons-lang3:3.8.1
+org.apache.maven:maven-archiver:3.5.2
+org.apache.maven:maven-artifact:3.8.6
+org.apache.maven:maven-builder-support:3.5.0
+org.apache.maven:maven-builder-support:3.8.6
+org.apache.maven:maven-core:3.5.0
+org.apache.maven:maven-core:3.8.6
+org.apache.maven:maven-model:3.8.6
+org.apache.maven:maven-model-builder:3.5.0
+org.apache.maven:maven-model-builder:3.8.6
+org.apache.maven:maven-plugin-api:3.5.0
+org.apache.maven:maven-plugin-api:3.8.5
+org.apache.maven:maven-repository-metadata:3.5.0
+org.apache.maven:maven-repository-metadata:3.8.6
+org.apache.maven:maven-resolver-provider:3.5.0
+org.apache.maven:maven-resolver-provider:3.8.6
+org.apache.maven:maven-settings:3.5.0
+org.apache.maven:maven-settings:3.8.6
+org.apache.maven:maven-settings-builder:3.5.0
+org.apache.maven:maven-settings-builder:3.8.6
+org.apache.maven.enforcer:enforcer-api:3.0.0
+org.apache.maven.plugin-tools:maven-plugin-annotations:3.5
+org.apache.maven.plugin-tools:maven-plugin-annotations:3.6.4
+org.apache.maven.resolver:maven-resolver-api:1.0.3
+org.apache.maven.resolver:maven-resolver-api:1.6.3
+org.apache.maven.resolver:maven-resolver-impl:1.0.3
+org.apache.maven.resolver:maven-resolver-impl:1.6.3
+org.apache.maven.resolver:maven-resolver-spi:1.0.3
+org.apache.maven.resolver:maven-resolver-spi:1.6.3
+org.apache.maven.resolver:maven-resolver-util:1.0.3
+org.apache.maven.resolver:maven-resolver-util:1.6.3
+org.apache.maven.shared:maven-dependency-tree:3.1.1
+org.apache.maven.shared:maven-shared-utils:3.1.0
+org.apache.maven.shared:maven-shared-utils:3.3.3
+org.apache.maven.shared:maven-shared-utils:3.3.4
+org.apiguardian:apiguardian-api:1.1.2
+org.codehaus.plexus:plexus-archiver:4.2.7
+org.codehaus.plexus:plexus-cipher:2.0
+org.codehaus.plexus:plexus-classworlds:2.5.2
+org.codehaus.plexus:plexus-classworlds:2.6.0
+org.codehaus.plexus:plexus-component-annotations:1.7.1
+org.codehaus.plexus:plexus-component-annotations:2.1.0
+org.codehaus.plexus:plexus-interpolation:1.24
+org.codehaus.plexus:plexus-interpolation:1.26
+org.codehaus.plexus:plexus-io:3.2.0
+org.codehaus.plexus:plexus-sec-dispatcher:2.0
+org.codehaus.plexus:plexus-utils:3.0.24
+org.codehaus.plexus:plexus-utils:3.3.0
+org.codehaus.plexus:plexus-utils:3.3.1
+org.eclipse.aether:aether-util:1.1.0
+org.eclipse.sisu:org.eclipse.sisu.inject:0.3.3
+org.eclipse.sisu:org.eclipse.sisu.inject:0.3.5
+org.eclipse.sisu:org.eclipse.sisu.plexus:0.3.3
+org.eclipse.sisu:org.eclipse.sisu.plexus:0.3.5
+org.hamcrest:hamcrest-all:1.3
+org.hamcrest:hamcrest-core:1.3
+org.iq80.snappy:snappy:0.4
+org.junit.jupiter:junit-jupiter:5.8.1
+org.junit.jupiter:junit-jupiter-api:5.8.1
+org.junit.jupiter:junit-jupiter-engine:5.8.1
+org.junit.jupiter:junit-jupiter-params:5.8.1
+org.junit.platform:junit-platform-commons:1.8.1
+org.junit.platform:junit-platform-engine:1.8.1
+org.mockito:mockito-core:4.0.0
+org.objenesis:objenesis:3.2
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm:9.3
+org.slf4j:slf4j-api:1.7.32
+org.slf4j:slf4j-simple:1.7.22
+org.sonatype.plexus:plexus-cipher:1.4
+org.sonatype.plexus:plexus-sec-dispatcher:1.4
+org.tukaani:xz:1.9
+org.twdata.maven:mojo-executor:2.3.0
diff --git a/maven-plugins/pom.xml b/maven-plugins/pom.xml
index 4ad063a39cc..d71e1a0f068 100644
--- a/maven-plugins/pom.xml
+++ b/maven-plugins/pom.xml
@@ -25,6 +25,44 @@
         <module>../vespa-enforcer-extensions</module>
     </modules>
 
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-enforcer-plugin</artifactId>
+                <inherited>false</inherited>
+                <dependencies>
+                    <dependency>
+                        <groupId>com.yahoo.vespa</groupId>
+                        <artifactId>vespa-enforcer-extensions</artifactId>
+                        <version>${project.version}</version>
+                    </dependency>
+                </dependencies>
+                <executions>
+                    <execution>
+                        <id>default-cli</id>
+                        <goals>
+                            <!-- To allow running 'mvn enforcer:enforce' from the command line -->
+                            <goal>enforce</goal>
+                        </goals>
+                        <configuration>
+                            <rules>
+                                <enforceDependencies implementation="com.yahoo.vespa.maven.plugin.enforcer.EnforceDependenciesAllProjects">
+                                    <specFile>allowed-maven-dependencies.txt</specFile>
+                                    <ignored>
+                                        <i>com.yahoo.vespa:*:*</i>
+                                        <i>ai.vespa:*:*</i>
+                                    </ignored>
+                                </enforceDependencies>
+                            </rules>
+                            <fail>true</fail>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
+        </plugins>
+    </build>
+
     <properties>
         <maven.deploy.skip>true</maven.deploy.skip>
         <maven.javadoc.skip>true</maven.javadoc.skip>