[MDEP-802] analyze-only fails to recognize `aws-java-sdk-core` as a compile-time dependency

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.3.0
• Component/s: analyze-only
• Assignee: Unassigned
• Reporter: Marius Grama
• Created: 25/Apr/22 07:49
• Updated: 26/Sep/22 17:18

Description

The maven-dependency-plugin fails to recognize `aws-java-sdk-core` as a compile-time dependency, because we only explicitly use a class from `aws-java-sdk-glue`, which in turn extends from a class from `aws-java-sdk-core`.

 

In order to cope with this problem, we set `aws-java-sdk-core` as an ignored dependency:

 

                        <artifactId>maven-dependency-plugin</artifactId>
                        <configuration>
                            <ignoredNonTestScopedDependencies>
                                <!-- dependency plugin fails to recognize aws-java-sdk-core as a compile-time dependency, because
                                     we only explicitly use a class from aws-java-sdk-glue, which in turn extends from a class from
                                     aws-java-sdk-core -->
                                <ignoredDependency>com.amazonaws:aws-java-sdk-core</ignoredDependency>
                            </ignoredNonTestScopedDependencies>
                        </configuration>
                    </plugin>

 

Here is the commit showcasing the issue:

 

https://github.com/trinodb/trino/pull/11550/commits/22f227bb5721b1ea4783c6a58111ef5007f75316

 

Ideally we'd like not having to deal with this false positive problem.