Skip to content

docs: add note about central analyzer for gradle #8038

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Oct 13, 2025
Merged

docs: add note about central analyzer for gradle #8038

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions src/site/markdown/analyzers/central-analyzer.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,11 @@ is found in the configured Nexus repository, its GAV is recorded as an Identifie
and the Group is collected as Vendor evidence, the Artifact is collected as Product
evidence, and the Version is collected as Version evidence.

By default, this analyzer is disabled in the Maven Plugin and Gradle Task. However,
if your Gradle build relies on scanning non-Gradle artifacts or archives from other
ecosystems that contain jars, consider re-enabling the Central Analyzer using
`analyzers.centralEnabled=true`, or use the Nexus/Artifactory analyzers as an
alternative to improve identification of JARs utilized outside the normal gradle
Java plugin.

[1]: http://search.maven.org/ "Maven Central"