Thomas

> If we get enough community feedback that supports no longer filtering the "sonatype-####" from the unauthenticated results we would certainly be willing and happy to do so. @ken-duck so...

I've also had much of the same problem in a non-Kotlin project of mine (can't easily share because it's closed source) that otherwise doesn't have pitest anywhere in the graph....

I'm not one of the maintainers, just a guy with often annoying opinions, but would an entirely separate tool be more appropriate? The way I see the maven plugin itself...

Came here wondering the same thing, as I'm in the market for a plugin to simplify my build pipelines. Looks like the answer is no based on the fact that...

I had the same problem today. We've got a commit from 8 years ago in one of our repos that improperly removed a submodule and created a corrupt commit, so...

I've been seeing similar problems and Google led me here. Apparently it's a bug with Gradle itself: https://github.com/gradle/gradle/issues/24390 Having a read through that issue it sounds like the solution is...

This wouldn't be a problem with the Dependency Check plugin but your pipeline configuration for Azure DevOps. It doesn't appear to have been properly configured to run the right task....

CycloneDX-CLI and Cyclone-Gradle-Plugin are two different tools for different purposes: The Gradle plugin is for making BOMs (specifically for Gradle projects) while the CLI tool is for manipulating & analyzing...

I was having the same problem with Azure DevOps (Sonar leaving a summary comment, but no individual comments per issue) but I figured it out and thought I'd leave a...

I'm not entirely sure on what the perceived problem is that you're trying to solve, but it sounds like your build platform (Jenkins, TravisCI, etc.) is doing too much of...