From a874c5e8bce48e6a8e734126a3e802487f0fb0ae Mon Sep 17 00:00:00 2001
From: Trask Stalnaker <trask.stalnaker@gmail.com>
Date: Wed, 22 Jan 2025 10:18:30 -0800
Subject: [PATCH] Exclude META-INF/maven from shaded libraries (#4040)

---
 agent/agent/build.gradle.kts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/agent/agent/build.gradle.kts b/agent/agent/build.gradle.kts
index 03fbcaad9d..7e0b8a0927 100644
--- a/agent/agent/build.gradle.kts
+++ b/agent/agent/build.gradle.kts
@@ -207,6 +207,9 @@ fun CopySpec.isolateClasses(jars: Iterable<File>) {
       rename("^(.*)\\.class\$", "\$1.classdata")
       // Rename LICENSE file since it clashes with license dir on non-case sensitive FSs (i.e. Mac)
       rename("""^LICENSE$""", "LICENSE.renamed")
+      // excluding pom.xml files that are embedded in several dependencies
+      // in order to avoid false positives from security scanners
+      exclude("META-INF/maven/**")
     }
   }
   from("${rootProject.projectDir}/LICENSE") {