Identify open source jars in Talend project

Five Stars

Identify open source jars in Talend project

Hi All.  For my project, I have to supply my company's security team with a list of all open source jars that will be used directly or indirectly anywhere in my project.  In other words, I need a dependency tree.  

 

In Talend, I can find the list of installed modules, but I see nothing in that view that indicates whether I have a job that actually uses the module and I see some that I am definitely not using on the installed list.

 

I attempted to just find one of the pom files and get a maven dependency tree from the command line (i.e. maven dependency:tree) but that failed, I assume because my generic maven on that machine is not configured to access Talend repos or something...

 

Anyone know how I can find this dependency (which must include all jobs/joblets/etc.). 

 

If the answer is that I need to use Maven from the command line, then please let me know the settings I need for maven.

 

Thanks.

 

 

Tags (1)

Accepted Solutions
Highlighted
Seventeen Stars

Re: Identify open source jars in Talend project

This can be done in this way:

Create a job (wich will not actually be used in production) and add all your jobs in it. It does not matter if you do not set any context variables or any configuration.

Now right click on this job and choose Build job.

In the folder (under workspace) .Java/lib/ you will find all jars used in your jobs.

 


All Replies
Moderator

Re: Identify open source jars in Talend project

Hello,

Is it enough for you to set customization of assembly and maven pom.xml in Talend Studio configuration?

https://help.talend.com/reader/QrWkwPvKmKybs~JNLeBt3Q/3baqcOWkcGX8AZZdEeP5tA

Best regards

Sabrina

--
Don't forget to give kudos when a reply is helpful and click Accept the solution when you think you're good with it.
Highlighted
Seventeen Stars

Re: Identify open source jars in Talend project

This can be done in this way:

Create a job (wich will not actually be used in production) and add all your jobs in it. It does not matter if you do not set any context variables or any configuration.

Now right click on this job and choose Build job.

In the folder (under workspace) .Java/lib/ you will find all jars used in your jobs.

 

Five Stars

Re: Identify open source jars in Talend project

Thank you, but I am not seeing how that link applies to my question. I need to give our security team a list off ALL open source used in the project. So, what jar files are used but the jobs/components and all of the sub-dependencies of those jars. The other alternative, since I'm using the licensed version, is if Talend's license already guarantees the security of all of the jars it pulls in automatically. Is there something like that?
Five Stars

Re: Identify open source jars in Talend project

Thank you.  I actually dd see this, but this is really only step 1.  This will show me that my jobs, for example, use a combined 20 jar files.  But I still need to find all of the jar files that those 20 include (could end up being 100 or more potentially).  The maven argument "dependency:tree" can supply this information and since Talend uses Maven, I assumed there should be some straightforward way to run this command on my jobs, but I can't find it...

 

 

Five Stars

Re: Identify open source jars in Talend project

Actually, I finally figured out what I was trying to do originally which was get the maven dependency tree.  From the command line I was originally just locating the POM.xml and running "mvn dependency:tree".  I didn't realize that this was using Maven's default settings file and I needed to use Talends settings file.  So, once I did "mvn -s <path to talend settings.xml> dependency:tree", I got the results.

 

However, the results tree actually doesn't go into much more detail than the list created by answer below, so O accepted that as a viable solution.  

 

Thanks for the help.

 

 

 

 

2019 GARNER MAGIC QUADRANT FOR DATA INTEGRATION TOOL

Talend named a Leader.

Get your copy

OPEN STUDIO FOR DATA INTEGRATION

Kickstart your first data integration and ETL projects.

Download now

What’s New for Talend Summer ’19

Watch the recorded webinar!

Watch Now

Best Practices for Using Context Variables with Talend – Part 1

Learn how to do cool things with Context Variables

Blog

Migrate Data from one Database to another with one Job using the Dynamic Schema

Find out how to migrate from one database to another using the Dynamic schema

Blog

Best Practices for Using Context Variables with Talend – Part 4

Pick up some tips and tricks with Context Variables

Blog