gradle 如何在Flutter项目中创建BOM表文件

eoigrqb6 于 2023-06-23 发布在 Flutter

关注(0)|答案(2)|浏览(183)

我试图为Flutter项目的Android部分创建一个BOM文件，用于安全扫描。
我添加了org.cyclonedx.bom（gradle插件）到gradle，我正在运行cyclonedxBom gradle任务，但我得到一个错误：

> Could not resolve all dependencies for configuration ':app:apiDependenciesMetadata'.
   > Could not resolve project :flutter_udid.
     Required by:
         project :app
      > The consumer was configured to find a usage of 'kotlin-metadata'Execution failed for task ':app:cyclonedxBom'. of a library, as well as attribute 'org.jetbrains.kotlin.platform.type' with value 'common'. However we cannot choose between the following variants of project :flutter_udid:
          - debugApiElements
          - profileApiElements
          - releaseApiElements
        All of them match the consumer attributes:
          - Variant 'debugApiElements' capability de.gigadroid.flutterudid:flutter_udid:1.0-SNAPSHOT declares an API of a library, as well as attribute 'org.jetbrains.kotlin.platform.type' with value 'androidJvm':
              - Unmatched attributes:
                  - Provides attribute 'com.android.build.api.attributes.BuildTypeAttr' with value 'debug' but the consumer didn't ask for it
                  - Provides attribute 'com.android.build.api.attributes.VariantAttr' with value 'debug' but the consumer didn't ask for it
                  - Provides attribute 'org.gradle.jvm.environment' with value 'android' but the consumer didn't ask for it
          - Variant 'profileApiElements' capability de.gigadroid.flutterudid:flutter_udid:1.0-SNAPSHOT declares an API of a library, as well as attribute 'org.jetbrains.kotlin.platform.type' with value 'androidJvm':
              - Unmatched attributes:
                  - Provides attribute 'com.android.build.api.attributes.BuildTypeAttr' with value 'profile' but the consumer didn't ask for it
                  - Provides attribute 'com.android.build.api.attributes.VariantAttr' with value 'profile' but the consumer didn't ask for it
                  - Provides attribute 'org.gradle.jvm.environment' with value 'android' but the consumer didn't ask for it
          - Variant 'releaseApiElements' capability de.gigadroid.flutterudid:flutter_udid:1.0-SNAPSHOT declares an API of a library, as well as attribute 'org.jetbrains.kotlin.platform.type' with value 'androidJvm':
              - Unmatched attributes:
                  - Provides attribute 'com.android.build.api.attributes.BuildTypeAttr' with value 'release' but the consumer didn't ask for it
                  - Provides attribute 'com.android.build.api.attributes.VariantAttr' with value 'release' but the consumer didn't ask for it
                  - Provides attribute 'org.gradle.jvm.environment' with value 'android' but the consumer didn't ask for it

gradle中的依赖项看起来像

dependencies {
        classpath 'com.android.tools.build:gradle:4.2.0'
        classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlin_version"
        // Firebase
        classpath 'com.google.gms:google-services:4.3.15'
        classpath 'org.cyclonedx.bom:org.cyclonedx.bom.gradle.plugin:1.7.4'
    }

apply plugin: 'com.android.application'
apply plugin: 'kotlin-android'
// Firebase
apply plugin: 'com.google.gms.google-services'
// BOM generation https://github.com/CycloneDX/cyclonedx-gradle-plugin
apply plugin: 'org.cyclonedx.bom'
apply from: "$flutterRoot/packages/flutter_tools/gradle/flutter.gradle"

如何配置项目以生成发布版本的BOM？

Gradle

来源：https://stackoverflow.com/questions/76515339/how-to-create-a-bom-file-in-a-flutter-project

2条答案

按热度按时间

pprl5pva1#

错误消息表明消费者（您的项目）无法解析：app：apiDependenciesMetadata配置的依赖项，特别是：flutter_udid模块。似乎org.cyclonedx.bom插件在确定要使用的flutter_udid模块的适当变体时遇到了困难。
要配置项目以生成发布版本的BOM表（BOM），可以在Gradle配置中指定所需的变体。将以下代码添加到应用的build.gradle文件中：

configurations {
    // Configure the BOM generation for the release variant
    releaseBomMetadata.extendsFrom(apiElements.get().withVariantConstraints {
        // Constrain the variant to release
        it.attributes {
            attribute(org.jetbrains.kotlin.platform.type, 'androidJvm')
            attribute(com.android.build.api.attributes.BuildTypeAttr, 'release')
        }
    })
}

这个配置创建了一个名为releaseBomMetadata的新配置，它扩展了现有的apiElements配置。它对变体属性设置约束，以匹配flutter_udid模块的发布变体。
添加此配置后，您可以再次运行cyclonedxBom Gradle任务，它应该会生成发布版本的BOM。
注意：如果您希望使用不同的配置名称，请确保使用您选择的名称替换releaseBomMetadata。

赞(0）回复(0）举报 2023-06-23

33qvvth12#

configurations {
    // Configure the BOM generation for the release variant
    releaseBomMetadata.extendsFrom(getConfigurations().getByName('apiElements').withVariantConstraints {
        // Constrain the variant to release
        it.attributes {
            attribute(org.jetbrains.kotlin.platform.type, 'androidJvm')
            attribute(com.android.build.api.attributes.BuildTypeAttr, 'release')
        }
    })
}

如果您喜欢不同的名称，请将'releaseBomMetadata'替换为所需的配置名称。
在进行这些更改之后，尝试再次运行cyclonedxBom Gradle任务，它应该会生成发布版本的BOM，而不会出现之前的错误。

赞(0）回复(0）举报 2023-06-23

我来回答

gradle 如何在Flutter项目中创建BOM表文件

2条答案

相关问题

热门标签

最新问答