{"id":20434474,"url":"https://github.com/debricked/example-source-codeless-scan-gradle","last_synced_at":"2026-06-07T15:31:46.262Z","repository":{"id":53597617,"uuid":"276326607","full_name":"debricked/example-source-codeless-scan-gradle","owner":"debricked","description":"An example showcasing the Source-codeless Scan feature for a Gradle project","archived":false,"fork":false,"pushed_at":"2023-04-07T06:47:35.000Z","size":66,"stargazers_count":0,"open_issues_count":1,"forks_count":3,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-01-15T19:25:34.858Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/debricked.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-07-01T08:52:39.000Z","updated_at":"2021-07-13T08:59:46.000Z","dependencies_parsed_at":"2024-11-15T12:31:14.852Z","dependency_job_id":null,"html_url":"https://github.com/debricked/example-source-codeless-scan-gradle","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Fexample-source-codeless-scan-gradle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Fexample-source-codeless-scan-gradle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Fexample-source-codeless-scan-gradle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Fexample-source-codeless-scan-gradle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/debricked","download_url":"https://codeload.github.com/debricked/example-source-codeless-scan-gradle/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241977088,"owners_count":20051768,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-15T08:27:09.851Z","updated_at":"2026-06-07T15:31:46.227Z","avatar_url":"https://github.com/debricked.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Source-codeless Scan for Gradle, with Debricked Github Action\n\nThis example shows how you can use the Debricked Github Action to scan the dependencies of your Gradle repository, without uploading the source code to Debricked.\nThis is called a _Source-codeless Scan_, and is available for Gradle and Maven.\nNote that most other languages, such as JavaScript and Python, are already sourcecode-less by default, and you don't need to take any further action.\n\nTo do this for Gradle, two steps need to be performed.\n\n1. You need to generate a list of dependencies as a part of your own pipeline.\n2. These files must be uploaded to Debricked.\n\nThis repository shows how this can be done for a simple Gradle project.\n\n## Steps\n\nHere is a description of the two steps above in more details.\n\nIf you want to look at the final version of a working file, look in the [.github/workflows/vulnerabilities.yml](.github/workflows/vulnerabilities.yml) workflow file in this repository.\nThe different parts of it are described below.\n\n### Generate a list of dependencies\n\nThis can be done by running Gradle with the `dependencies` task, and storing the output in a file.\n\nConceptually, what needs to be done is to run: `gradle dependencies \u003e .debricked-gradle-dependencies.txt` as a part of the pipeline.\nThe output filename is important, the Debricked integration will look for these files in the next step.\nThe output file _must_ be placed in the same directory as the `build.gradle` file it belongs to, otherwise Debricked cannot connect them together.\n\nIn [.github/workflows/vulnerabilities.yml](.github/workflows/vulnerabilities.yml), this is the first part of the workflow, i.e., the following step:\n\n```\n    - run: sh ./gradlew dependencies \u003e .debricked-gradle-dependencies.txt\n```\n\nIf you haven't already, you also need to choose which Java version to use beforehand, like below:\n\n```\n    - uses: actions/setup-java@v1\n      with:\n        java-version: '13'\n    - run: sh ./gradlew dependencies \u003e .debricked-gradle-dependencies.txt\n```\n\nIf you don't use the Gradle wrapper `gradlew` in your repository, you need to install the correct Gradle version yourself beforehand.\n\n### Upload dependency files to Debricked\n\nThis is done with the usual Github Action, described in https://github.com/debricked/actions.\nAs long as your files are named correctly (`.debricked-gradle-dependencies.txt` for Gradle), the action will automatically detect that you have generated the dependency file yourself.\nThis means you should *not* enable the `UPLOAD_ALL_FILES` option.\n\nExample of this step:\n\n```\n    - uses: debricked/actions/scan@v1\n      env:\n        USERNAME: ${{ secrets.DEBRICKED_USERNAME }}\n        PASSWORD: ${{ secrets.DEBRICKED_PASSWORD }}\n```\n\n## License\n\nThe Gradle example is based on the code from this tutorial https://github.com/spring-guides/gs-gradle, which is licensed under the Apache License, Version 2.0.\n\nModifications performed by Debricked, as well as other files are also covered under the Apache License, Version 2.0.\n\nSee the file LICENSE in this repository.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdebricked%2Fexample-source-codeless-scan-gradle","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdebricked%2Fexample-source-codeless-scan-gradle","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdebricked%2Fexample-source-codeless-scan-gradle/lists"}