Consider gradle configurations for testFixtures as test dependencies

[daniel-kr]

Hi,

by default, fossa excludes test dependencies which is great. For gradle builds, this is determined by a list of configurations that are considered as test dependencies. As far as I can see, this is specified in the https://github.com/fossas/fossa-cli/blob/master/src/Strategy/Gradle/Common.hs.

We are using the test fixture mechanism of Gradle in order to provide some API for test execution to other gradle modules.

Currently, fossa considers them as prod dependencies although they are test dependencies as well.

Would it be possible to add the gradle configurations testFixturesApi and testFixturesImplementation to the list of test configurations as well?

Kind Regards, Daniel

[meghfossa]

Can you try again with v3.2.14? https://github.com/fossas/fossa-cli/releases/tag/v3.2.14

[daniel-kr]

Wow, that was quick. Thank you! Unfortunately, it somehow does not work for me. 🤔 I have specified testFixturesApi 'com.tngtech.archunit:archunit-junit4:0.14.1' in my build.gradle but it is still reported as a dependency in FOSSA. When I change it to testImplementation, it is not reported as a dependency. According to the output of the cli tool, I am using version 3.2.14

Scan Summary
[ INFO] ------------
[ INFO] fossa-cli version 3.2.14 (revision 693e703343c3 compiled with ghc-9.0)

[meghfossa]

Interesting, can you provide an output of ./gradlew dependencies?