All of the major Hadoop component dependencies have been migrated to the CDP versions and come from the CDP_BUILD_NUMBER maven repository. Based on output from GVO, nothing comes from the CDH_BUILD_NUMBER maven repository in the main build.
There are a couple things that are not in the main build that get artifacts from the CDH build repo. Specifically, the Apache Kite dependency in testdata/pom.xml and testdata/TableFlattener/pom.xml uses a CDH version.
We should migrate to a public version of Kite and remove the CDH build repository (and associated CDH_BUILD_NUMBER code).