From 9c4751e8d95ff9fb38cf3d2e308e1fbb71256acc Mon Sep 17 00:00:00 2001
From: gjoranv <gv@oath.com>
Date: Mon, 25 Sep 2017 14:06:35 +0200
Subject: Enforce predefined set of allowed provided container deps.

---
 container-dependencies-enforcer/pom.xml | 118 ++++++++++++++++++++++++++++++++
 1 file changed, 118 insertions(+)
 create mode 100644 container-dependencies-enforcer/pom.xml

(limited to 'container-dependencies-enforcer')

diff --git a/container-dependencies-enforcer/pom.xml b/container-dependencies-enforcer/pom.xml
new file mode 100644
index 00000000000..caffe130445
--- /dev/null
+++ b/container-dependencies-enforcer/pom.xml
@@ -0,0 +1,118 @@
+<?xml version="1.0"?>
+<!-- Copyright 2017 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root. -->
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
+                             http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <groupId>com.yahoo.vespa</groupId>
+    <artifactId>container-dependencies-enforcer</artifactId>
+    <version>6-SNAPSHOT</version>
+    <packaging>pom</packaging>
+
+    <dependencies>
+        <dependency>
+            <groupId>com.yahoo.vespa</groupId>
+            <artifactId>application</artifactId>
+            <version>${project.version}</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>com.yahoo.vespa</groupId>
+            <artifactId>container-dev</artifactId>
+            <version>${project.version}</version>
+            <scope>provided</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-enforcer-plugin</artifactId>
+                <version>3.0.0-M1</version>
+                <executions>
+                    <execution>
+                        <!-- To allow running 'mvn enforcer:enforce' from the command line -->
+                        <id>default-cli</id>
+                        <goals>
+                            <goal>enforce</goal>
+                        </goals>
+                        <configuration>
+                            <rules>
+                                <bannedDependencies>
+                                    <excludes>
+                                        <!-- Only allow explicitly listed deps in provided scope -->
+                                        <exclude>*:*:*:jar:provided:*</exclude>
+                                    </excludes>
+                                    <includes>
+                                        <include>com.yahoo.vespa</include>
+                                        <include>aopalliance:aopalliance:1.0:jar:provided</include>
+                                        <include>com.fasterxml.jackson.core:jackson-annotations:2.8.3:jar:provided</include>
+                                        <include>com.fasterxml.jackson.core:jackson-core:2.8.3:jar:provided</include>
+                                        <include>com.fasterxml.jackson.core:jackson-databind:2.8.3:jar:provided</include>
+                                        <include>com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.8.3:jar:provided</include>
+                                        <include>com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:2.5.4:jar:provided</include>
+                                        <include>com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:2.5.4:jar:provided</include>
+                                        <include>com.fasterxml.jackson.module:jackson-module-jaxb-annotations:2.5.4:jar:provided</include>
+                                        <include>com.google.code.findbugs:annotations:1.3.9:jar:provided</include>
+                                        <include>com.google.code.findbugs:jsr305:1.3.9:jar:provided</include>
+                                        <include>com.google.guava:guava:18.0:jar:provided</include>
+                                        <include>com.google.inject.extensions:guice-assistedinject:3.0:jar:provided</include>
+                                        <include>com.google.inject.extensions:guice-multibindings:3.0:jar:provided</include>
+                                        <include>com.google.inject:guice:3.0:jar:provided:no_aop</include>
+                                        <include>commons-codec:commons-codec:1.4:jar:provided</include>
+                                        <include>commons-daemon:commons-daemon:1.0.3:jar:provided</include>
+                                        <include>commons-logging:commons-logging:1.1.1:jar:provided</include>
+                                        <include>javax.annotation:javax.annotation-api:1.2:jar:provided</include>
+                                        <include>javax.inject:javax.inject:1:jar:provided</include>
+                                        <include>javax.servlet:javax.servlet-api:3.1.0:jar:provided</include>
+                                        <include>javax.validation:validation-api:1.1.0.Final:jar:provided</include>
+                                        <include>javax.ws.rs:javax.ws.rs-api:2.0.1:jar:provided</include>
+                                        <include>net.jcip:jcip-annotations:1.0:jar:provided</include>
+                                        <include>net.jpountz.lz4:lz4:1.3.0:jar:provided</include>
+                                        <include>org.apache.felix:org.apache.felix.framework:4.2.1:jar:provided</include>
+                                        <include>org.apache.felix:org.apache.felix.log:1.0.1:jar:provided</include>
+                                        <include>org.apache.felix:org.apache.felix.main:4.2.1:jar:provided</include>
+                                        <include>org.apache.httpcomponents:httpclient:4.3.6:jar:provided</include>
+                                        <include>org.apache.httpcomponents:httpcore:4.3.3:jar:provided</include>
+                                        <include>org.eclipse.jetty:jetty-http:9.4.6.v20170531:jar:provided</include>
+                                        <include>org.eclipse.jetty:jetty-io:9.4.6.v20170531:jar:provided</include>
+                                        <include>org.eclipse.jetty:jetty-util:9.4.6.v20170531:jar:provided</include>
+                                        <include>org.glassfish.hk2.external:aopalliance-repackaged:2.5.0-b05:jar:provided</include>
+                                        <include>org.glassfish.hk2.external:javax.inject:2.5.0-b05:jar:provided</include>
+                                        <include>org.glassfish.hk2:hk2-api:2.5.0-b05:jar:provided</include>
+                                        <include>org.glassfish.hk2:hk2-locator:2.5.0-b05:jar:provided</include>
+                                        <include>org.glassfish.hk2:hk2-utils:2.5.0-b05:jar:provided</include>
+                                        <include>org.glassfish.hk2:osgi-resource-locator:1.0.1:jar:provided</include>
+                                        <include>org.glassfish.jersey.bundles.repackaged:jersey-guava:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.containers:jersey-container-servlet-core:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.containers:jersey-container-servlet:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.core:jersey-client:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.core:jersey-common:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.core:jersey-server:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.ext:jersey-entity-filtering:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.ext:jersey-proxy-client:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.media:jersey-media-jaxb:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.media:jersey-media-json-jackson:2.23.2:jar:provided</include>
+                                        <include>org.glassfish.jersey.media:jersey-media-multipart:2.23.2:jar:provided</include>
+                                        <include>org.javassist:javassist:3.20.0-GA:jar:provided</include>
+                                        <include>org.json:json:20090211:jar:provided</include>
+                                        <include>org.jvnet.mimepull:mimepull:1.9.6:jar:provided</include>
+                                        <include>org.scala-lang.modules:scala-parser-combinators_2.11:1.0.1:jar:provided</include>
+                                        <include>org.slf4j:jcl-over-slf4j:1.7.5:jar:provided</include>
+                                        <include>org.slf4j:log4j-over-slf4j:1.7.5:jar:provided</include>
+                                        <include>org.slf4j:slf4j-api:1.7.5:jar:provided</include>
+                                        <include>org.slf4j:slf4j-jdk14:1.7.5:jar:provided</include>
+                                        <include>xml-apis:xml-apis:1.4.01:jar:provided</include>
+                                    </includes>
+                                </bannedDependencies>
+                            </rules>
+                            <fail>true</fail>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
+        </plugins>
+    </build>
+</project>
-- 
cgit v1.2.3