build: activate lockfile generation for security scan

halestudio · Mar 13, 2024 · c50d6f9 · c50d6f9
1 parent 83fadd0
commit c50d6f9
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -175,6 +175,17 @@ configurations.all {
   // ensure SNAPSHOTs are updated every time if needed
   resolutionStrategy.cacheChangingModulesFor 0, 'seconds'
 }
+
+configurations {
+  // activate dependency locks for lockfile generation (used by trivy security scan)
+  compileClasspath {
+    resolutionStrategy.activateDependencyLocking()
+  }
+  runtimeClasspath {
+    resolutionStrategy.activateDependencyLocking()
+  }
+}
+
 def defaultJvmArgs = ['-Dcache.level1.enabled=false',
                                 '-Dcache.level1.size=0',
                                 '-Dcache.level2.enabled=false',