Has anyone integrated a tool like https://github.com/clj-holmes/clj-watson with polylith?
I had a brief go-around using find . -name 'deps.edn' and scanning each deps.edn file I came across, but that felt pretty clumsy
Wondering if there's a middle-ground I'm missing between watson and something like clj -Stree -M:dev
ah I totally missed that aliases flag! That helped a bunch, thanks a ton Sean! Really appreciate your work on watson (and here, and a bunch of other places too!)!
Here's the alias we use (top-level deps.edn):
:watson
{:replace-deps {io.github.clj-holmes/clj-watson
{:git/tag "v6.0.1" :git/sha "b520351"}
org.owasp/dependency-check-core {:mvn/version "RELEASE"}}
:replace-paths ["development/watson"]
:jvm-opts ["-Dlog4j2.configurationFile=/var/www/worldsingles/development/watson/log4j2.properties"
"-Dclojure.tools.logging.factory=clojure.tools.logging.impl/log4j2-factory"]
:main-opts ["-m" "clj-watson.cli" "scan"
"-p" "deps.edn"
"-a" ":dev"
"-o" "stdout"]}
And then clojure -M:watsondevelopment/watson has our clj-watson.properties file with our API key etc and a log4j2 properties file.
(you can ignore the :jvm-opts and log4j2 stuff)
The -a :dev is what tells Watson to use the :dev alias which has "everything" in Polylith.