👷 ci: add [email protected] to code quality workflow

.github/workflows/code-qualitiy.yml

@@ -75,3 +75,31 @@ jobs:
         run: mvn --batch-mode --update-snapshots clean install
       - name: Run reproducibility check
         run: mvn clean install
+  dirty-waters:
+    runs-on:
+        ubuntu-latest
+    permissions:
+      pull-requests: write # To comment on a Pull Request
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          submodules: true
+      - name: Setup JDK17
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+      - name: Dirty Waters Analysis
+        uses: chains-project/dirty-waters-action@57e2b7be964e687bdab629460efb274053fe3b28 # v1.11.45
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          package_manager: maven
+          gradual_report: false
+          debug: true
+          config: dirty-waters.json
+

dirty-waters.json

@@ -0,0 +1,64 @@
+{
+    "ignore": {
+        "aopalliance:[email protected]": ["code_signature"],
+        "com.google.collections:[email protected]": ["code_signature"],
+        "com.google.guava:[email protected]": ["source_code_sha"],
+        "commons-beanutils:[email protected]": ["source_code", "code_signature"],
+        "commons-chain:[email protected]": ["code_signature"],
+        "commons-cli:[email protected]": ["source_code_sha"],
+        "commons-codec:[email protected]": ["source_code_sha"],
+        "commons-codec:[email protected]": ["source_code_sha"],
+        "commons-codec:[email protected]": ["source_code_sha"],
+        "commons-digester:[email protected]": ["code_signature"],
+        "commons-io:[email protected]": ["source_code_sha"],
+        "commons-io:[email protected]": ["source_code_sha"],
+        "commons-io:[email protected]": ["source_code_sha"],
+        "commons-io:[email protected]": ["source_code_sha"],
+        "dom4j:[email protected]": ["source_code", "code_signature"],
+        "io.github.crac:[email protected]": ["source_code_sha"],
+        "io.vertx:[email protected]": ["source_code_sha"],
+        "io.vertx:[email protected]": ["source_code_sha"],
+        "io.vertx:[email protected]": ["source_code_sha"],
+        "io.vertx:[email protected]": ["source_code_sha"],
+        "jakarta.el:[email protected]": ["source_code_sha"],
+        "jakarta.interceptor:[email protected]": ["source_code_sha"],
+        "jakarta.json:[email protected]": ["source_code_sha"],
+        "javax.inject:javax.inject@1": ["code_signature"],
+        "om.kohlschutter.junixsocket:[email protected]": ["code_signature"],
+        "org.aesh:[email protected]": ["code_signature", "source_code_sha"],
+        "org.aesh:[email protected]": ["code_signature"],
+        "org.apache.commons:[email protected]": ["source_code_sha"],
+        "org.apache.commons:[email protected]": ["source_code_sha"],
+        "org.apache.commons:[email protected]": ["source_code_sha"],
+        "org.apache.commons:[email protected]": ["source_code_sha"],
+        "org.apache.commons:[email protected]": ["source_code_sha"],
+        "org.apache.commons:[email protected]": ["source_code_sha"],
+        "org.apache.httpcomponents:[email protected]": ["source_code_sha"],
+        "org.apache.httpcomponents:[email protected]": ["source_code_sha"],
+        "org.codehaus.plexus:[email protected]": ["code_signature"],
+        "org.eclipse.sisu:[email protected]": ["source_code_sha"],
+        "org.eclipse.sisu:[email protected]": ["source_code_sha"],
+        "org.iq80.snappy:[email protected]": ["source_code"],
+        "org.jboss.logging:[email protected]": ["code_signature"],
+        "org.jboss.logging:[email protected]": ["code_signature"],
+        "org.jboss.logging:[email protected]": ["code_signature"],
+        "org.jboss.logmanager:[email protected]": ["code_signature"],
+        "org.jboss.marshalling:[email protected]": ["source_code_sha"],
+        "org.jboss.slf4j:[email protected]": ["code_signature", "source_code_sha"],
+        "org.jboss.threads:[email protected]": ["code_signature"],
+        "org.jdom:[email protected]": ["source_code_sha"],
+        "org.junit.platform:[email protected]": ["source_code_sha"],
+        "org.junit.platform:[email protected]": ["source_code_sha"],
+        "org.junit.platform:[email protected]": ["source_code_sha"],
+        "org.sonatype.plexus:[email protected]": ["source_code"],
+        "org.sonatype.plexus:[email protected]": ["source_code"],
+        "org.twdata.maven:[email protected]": ["source_code_sha"],
+        "org.wildfly.common:[email protected]": ["code_signature"],
+        "oro:[email protected]": ["source_code", "code_signature"]
+    },
+    "ignore-if-parent": {
+        "com.diffplug.spotless:[email protected]": ["source_code_sha"],
+        "org.apache.maven.plugins:[email protected]": ["source_code_sha"],
+        "org.apache.maven.plugins:[email protected]": ["source_code_sha"]
+    }
+}