feat: add --gradle-accept-legacy-config-roles flag

This patch adds the `--gradle-accept-legacy-config-roles` flag, and uses
a version of the Gradle plugin that accepts it. When set by the user,
the plugin will use a more permissive dependency resolution process.

See https://github.com/snyk/snyk-gradle-plugin/pull/191/files for more
details.

package.json

@@ -121,7 +121,7 @@
     "snyk-cpp-plugin": "2.12.3",
     "snyk-docker-plugin": "4.26.1",
     "snyk-go-plugin": "1.18.0",
-    "snyk-gradle-plugin": "3.16.2",
+    "snyk-gradle-plugin": "3.17.0",
     "snyk-module": "3.1.0",
     "snyk-mvn-plugin": "2.26.2",
     "snyk-nodejs-lockfile-parser": "1.37.1",

src/cli/args.ts

@@ -203,6 +203,7 @@ export function args(rawArgv: string[]): Args {
     'all-sub-projects',
     'sub-project',
     'gradle-sub-project',
+    'gradle-accept-legacy-config-roles',
     'skip-unresolved',
     'scan-all-unmanaged',
     'fail-on',

src/lib/types.ts

@@ -22,6 +22,7 @@ export interface TestOptions {
   initScript?: string;
   yarnWorkspaces?: boolean;
   gradleSubProject?: boolean;
+  gradleAcceptLegacyConfigRoles?: boolean;
   command?: string; // python interpreter to use for python tests
   testDepGraphDockerEndpoint?: string | null;
   isDockerUser?: boolean;
@@ -208,6 +209,7 @@ export type SupportedUserReachableFacingCliArgs =
   | 'sequential'
   | 'fail-on'
   | 'file'
+  | 'gradle-accept-legacy-config-roles'
   | 'gradle-sub-project'
   | 'ignore-policy'
   | 'init-script'

webpack.common.js

@@ -23,6 +23,10 @@ module.exports = {
           from: 'node_modules/@snyk/java-call-graph-builder/bin/init.gradle',
           to: '../bin',
         },
+        {
+          from: 'node_modules/snyk-gradle-plugin/lib/legacy-init.gradle',
+          to: '../lib',
+        },
         {
           from: 'node_modules/snyk-gradle-plugin/lib/init.gradle',
           to: '../lib',