Attribute shaded Maven classes to their dependency packages

scanpipe/pipelines/scan_maven_package.py

@@ -26,6 +26,7 @@
 from scanpipe.pipes.maven import check_input_and_return_purl
 from scanpipe.pipes.maven import fetch_and_scan_remote_pom
 from scanpipe.pipes.maven import fetch_inputs
+from scanpipe.pipes.maven import map_shaded_classes_to_maven_packages
 from scanpipe.pipes.maven import update_package_license_from_resource_if_missing
 
 
@@ -57,6 +58,7 @@ def steps(cls):
             cls.run_scan,
             cls.fetch_and_scan_remote_pom,
             cls.load_inventory_from_toolkit_scan,
+            cls.map_shaded_classes_to_maven_packages,
             cls.update_package_license_from_resource_if_missing,
             cls.make_summary_from_scan_results,
         )
@@ -176,6 +178,15 @@ def fetch_and_scan_remote_pom(self):
                     },
                 )
 
+    def map_shaded_classes_to_maven_packages(self):
+        """Attribute shaded Maven classes to their dependency packages."""
+        if self.d2d_enabled:
+            map_shaded_classes_to_maven_packages(
+                project=self.project,
+                purl=self.purl,
+                logger=self.log,
+            )
+
     def update_package_license_from_resource_if_missing(self):
         """
         Fill in missing package licenses using licenses detected in

scanpipe/pipes/flag.py

@@ -68,6 +68,8 @@
 NOT_DEPLOYED = "not-deployed"
 GENERATED = "generated-file"
 
+SHADED_CLASS = "shaded-class"
+
 
 # Target files that should be ignored during processing as those are related to the app
 # configuration.