sonar { skipProject = true } dependencies { // please keep list ordered api 'com.google.code.gson:gson' api 'com.google.guava:guava' api 'commons-io:commons-io' // transitive dependency of Velocity that must be upgraded // in order to fix a vulnerability api 'commons-collections:commons-collections:3.2.2' api 'org.apache.velocity:velocity:1.7' api 'org.slf4j:log4j-over-slf4j' api 'org.sonarsource.orchestrator:sonar-orchestrator' compileOnlyApi 'com.google.code.findbugs:jsr305' } task fatJar(type: Jar) { manifest { attributes 'Main-Class': 'org.sonarqube.wsgenerator.Generator' } archiveClassifier = 'jar-with-dependencies' from { configurations.runtimeClasspath.collect { it.isDirectory() ? it : zipTree(it) } } with jar }