Denylist PlayWeb configuration names with undefined config keys. Fixes #57

[matmannion]

• Ready for review
• Follows CONTRIBUTING rules
• Reviewed by Snyk internal team

What does this PR do?

Adds three new configuration keys, web-assets, web-plugin and web-assets-test to the denylist of config keys that are used in the Snyk sbt plugin (currently opt-in with --sbt-graph) to enable the plugin to work out of the box with Play Framework projects that use the standard Play plugin.

How should this be manually tested?

As per the instructions in #57:

• Create a new Play scala seed project: sbt new playframework/play-scala-seed.g8
• Accept the defaults; cd play-scala-seed
• Copy the Snyk sbt plugin from this PR to project/SnykSbtPlugin.scala
• Install the sbt-dependency-graph plugin locally on the project: echo 'addSbtPlugin("net.virtual-void" % "sbt-dependency-graph" % "0.10.0-RC1")' | tee --append project/plugins.sbt
• Run sbt snykRenderTree

What are the relevant tickets?

Fixes #57

[lili2311]

👋 Thank you for this awesome contribution, would you be able to add a test for this please to show the issue and that the repo now is successfully tested? Sounds like we can add aplayframework/play-scala-seed.g8 to fixtures and have a simple test to verify it scanned OK. Please let me know if you have any questions.

[CLAassistant]

All committers have signed the CLA.

[matmannion]

Hi @lili2311, I've added a system test with play-scala-seed using --sbt-graph, and making sure that the version parses out correctly.

[lili2311]

Thanks again for this contribution ❤️ It looks almost ready to merge.
Could you please update your commits to use feat: and maybe squash into 1 commit? Otherwise this won't release as we need semantic release style commit titles.

[matmannion]

That's squashed into a single feat: commit now.

[lili2311]

🎉

[snyksec]

🎉 This PR is included in version 2.8.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀