polylith

rwaweber 2025-05-13T20:15:17.935329Z

Has anyone integrated a tool like https://github.com/clj-holmes/clj-watson with polylith? I had a brief go-around using find . -name 'deps.edn' and scanning each deps.edn file I came across, but that felt pretty clumsy Wondering if there's a middle-ground I'm missing between watson and something like clj -Stree -M:dev

rwaweber 2025-05-14T22:16:15.709029Z

ah I totally missed that aliases flag! That helped a bunch, thanks a ton Sean! Really appreciate your work on watson (and here, and a bunch of other places too!)!

💯 1
1
seancorfield 2025-05-13T22:03:17.074989Z

Here's the alias we use (top-level deps.edn):

:watson
  {:replace-deps {io.github.clj-holmes/clj-watson
                  {:git/tag "v6.0.1" :git/sha "b520351"}
                  org.owasp/dependency-check-core {:mvn/version "RELEASE"}}
   :replace-paths ["development/watson"]
   :jvm-opts ["-Dlog4j2.configurationFile=/var/www/worldsingles/development/watson/log4j2.properties"
              "-Dclojure.tools.logging.factory=clojure.tools.logging.impl/log4j2-factory"]
   :main-opts    ["-m" "clj-watson.cli" "scan"
                  "-p" "deps.edn"
                  "-a" ":dev"
                  "-o" "stdout"]}
And then clojure -M:watson

❤️ 2
seancorfield 2025-05-13T22:04:08.491899Z

development/watson has our clj-watson.properties file with our API key etc and a log4j2 properties file.

seancorfield 2025-05-13T22:04:30.607709Z

(you can ignore the :jvm-opts and log4j2 stuff)

seancorfield 2025-05-13T22:05:28.328049Z

The -a :dev is what tells Watson to use the :dev alias which has "everything" in Polylith.

👍 2