Maven Plugin Configurations

SourceClear Software Composition Analysis

The SourceClear Maven plugin accepts the following parameters.
Note: Only apiToken is required if you have not already set the apiToken to the SRCCLR_API_TOKEN environment variable.
Without specifying any other options, the SourceClear platform assigns an appropriate name to display with your project from repository and file system information based on the .git information.

Field Name: apiToken

Description: The token that identifies you to the SourceClear web application. Required to run the plugin successfully.

Default Value: null

Example: <apiToken>xxsdf234Sasdvcve</apiToken>

Field Name: upload

Description: Indicates whether the plugin should upload your data to the SourceClear web application. If set to false, the plugin only displays results on the console.

Default Value: true

Example: <upload>false</upload>

Field Name: verbose

Description: By default, the Maven plugin only identifies vulnerable components to you on the command line. Setting verbose to true causes it to display all of the components it finds.

Default Value: false

Example: <verbose>true</verbose>