sonatype

buildSrc/build.gradle

@@ -9,4 +9,5 @@ repositories {
 
 dependencies {
     implementation libs.gradle.micronaut
+    implementation(libs.sonatype.scan)
 }

buildSrc/src/main/groovy/io.micronaut.build.internal.acme-module.gradle

@@ -1,4 +1,14 @@
 plugins {
     id "io.micronaut.build.internal.module"
     id "io.micronaut.build.internal.acme-base"
+    id("org.sonatype.gradle.plugins.scan")
+}
+String ossIndexUsername = System.getenv("OSS_INDEX_USERNAME") ?: project.properties["ossIndexUsername"]
+String ossIndexPassword = System.getenv("OSS_INDEX_PASSWORD") ?: project.properties["ossIndexPassword"]
+boolean sonatypePluginConfigured = ossIndexUsername != null && ossIndexPassword != null
+if (sonatypePluginConfigured) {
+    ossIndexAudit {
+        username = ossIndexUsername
+        password = ossIndexPassword
+    }
 }

gradle/libs.versions.toml

@@ -12,7 +12,7 @@ micronaut-serde = "2.12.0"
 micronaut-test-resources="2.6.2"
 micronaut-validation = "4.8.0"
 micronaut-gradle-plugin = "4.4.4"
-
+sonatype-scan = "3.0.0"
 [libraries]
 # Core
 micronaut-core = { module = 'io.micronaut:micronaut-core-bom', version.ref = 'micronaut' }
@@ -29,3 +29,4 @@ netty-tcnative-boringssl-static = { module = 'io.netty:netty-tcnative-boringssl-
 groovy-json = { module = 'org.apache.groovy:groovy-json' }
 groovy-dateutil = { module = 'org.apache.groovy:groovy-dateutil' }
 gradle-micronaut = { module = "io.micronaut.gradle:micronaut-gradle-plugin", version.ref = "micronaut-gradle-plugin" }
+sonatype-scan = { module = "org.sonatype.gradle.plugins:scan-gradle-plugin", version.ref = "sonatype-scan" }