Revert "Merge branch 'main' into issue-926-migrate-epss-mirroring"

This reverts commit d82248f, reversing
changes made to 19d62bf.

.checkstyle-header

@@ -0,0 +1,18 @@
+/*
+ * This file is part of Dependency-Track.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ * Copyright (c) OWASP Foundation. All Rights Reserved.
+ */

.checkstyle.xml

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE module PUBLIC
+        "-//Puppy Crawl//DTD Check Configuration 1.3//EN"
+        "http://www.puppycrawl.com/dtds/configuration_1_3.dtd">
+<module name="Checker">
+    <property name="localeLanguage" value="en"/>
+    <module name="Header">
+        <property name="charset" value="UTF-8"/>
+        <!-- <property name="headerFile" value=".checkstyle-header"/> -->
+    </module>
+    <module name="TreeWalker">
+        <module name="AvoidStarImport"/>
+        <module name="IllegalImport"/>
+        <module name="RedundantImport"/>
+        <module name="UnusedImports"/>
+    </module>
+</module>

.dockerignore

@@ -0,0 +1,9 @@
+.github/
+.idea/
+docs/
+scripts/
+# The source directory is required by Dockerfile.demo
+# src/
+target/
+!target/*.jar
+/*.md

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+- name: Slack Channel
+  url: https://dependencytrack.org/slack
+  about: Our Slack channel is the best way to get in touch!
+- name: GitHub Discussions
+  url: https://github.com/DependencyTrack/dependency-track/discussions
+  about: A good place to ask questions, share ideas and more!

.github/ISSUE_TEMPLATE/defect-report.yml

@@ -0,0 +1,130 @@
+name: Defect Report
+description: File a defect report
+labels: [ "defect", "in triage" ]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thank you for helping us in making Dependency-Track better!
+        
+        **Is the defect you'd like to report only UI-related?**
+        We have a dedicated repo for the frontend, please create an issue [there](https://github.com/DependencyTrack/frontend/issues/new/choose)!
+        Unsure? That's fine, just report it here! The maintainers will migrate the issue if necessary.
+        
+        **Please do not ask questions here!**
+        If you're not sure whether what you're experiencing is in fact a defect,
+        you can reach out to maintainers and the broader community via various channels.
+        Refer to our [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#asking-questions) to find out where and how to ask questions.
+  - type: textarea
+    id: behavior-current
+    attributes:
+      label: Current Behavior
+      description: |-
+        Describe the current faulty behavior that you observed.
+        Consider providing screenshots, log output, and other supplementary data.
+        
+        *Files and images can be included via drag and drop into this text field.*
+    validations:
+      required: true
+  - type: textarea
+    id: steps-to-reproduce
+    attributes:
+      label: Steps to Reproduce
+      description: |-
+        Describe the exact steps of how the defect can be reproduced.
+        Consider providing screenshots, BOM files, and other supplementary data.
+        
+        *Files and images can be included via drag and drop into this text field.
+        For BOM files, please redact any internal or otherwise confidential information.*
+      value: |-
+        1.
+    validations:
+      required: true
+  - type: textarea
+    id: behavior-expected
+    attributes:
+      label: Expected Behavior
+      description: >-
+        Describe how you expect Dependency-Track to behave instead.
+    validations:
+      required: true
+  - type: markdown
+    attributes:
+      value: |
+        ## Environment
+        Please provide some details about the environment in which you observed the defect.
+  - type: dropdown
+    id: environment-dtrack-version
+    attributes:
+      label: Dependency-Track Version
+      description: >-
+        What version of Dependency-Track are you using?
+      options:
+        - 4.6.x
+        - 4.7.0
+        - 4.7.1
+        - 4.8.0-SNAPSHOT
+    validations:
+      required: true
+  - type: dropdown
+    id: environment-dtrack-distribution
+    attributes:
+      label: Dependency-Track Distribution
+      description: >-
+        Which [distribution](https://docs.dependencytrack.org/getting-started/distributions/) of Dependency-Track are you using?
+      options:
+        - Container Image
+        - Executable WAR
+      multiple: true
+    validations:
+      required: true
+  - type: dropdown
+    id: environment-database-server
+    attributes:
+      label: Database Server
+      description: >-
+        What database server are you using?
+      options:
+        - PostgreSQL
+        - Microsoft SQL Server
+        - MySQL
+        - H2
+        - N/A
+    validations:
+      required: true
+  - type: input
+    id: environment-database-version
+    attributes:
+      label: Database Server Version
+      description: |-
+        What version of the database server are you using?
+        
+        *If you selected H2 or N/A in the field above, you can leave this empty.*
+      placeholder: "13.5"
+    validations:
+      required: false
+  - type: dropdown
+    id: environment-browser
+    attributes:
+      label: Browser
+      description: |-
+        What browser are you using?
+        
+        *If the defect is not UI-related, just select the N/A option.*
+      options:
+        - Google Chrome
+        - Mozilla Firefox
+        - Apple Safari
+        - Microsoft Edge
+        - Other
+        - N/A
+    validations:
+      required: true
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Checklist
+      options:
+        - label: I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
+          required: true
+        - label: I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

.github/ISSUE_TEMPLATE/enhancement-request.yml

@@ -0,0 +1,46 @@
+name: Enhancement Request
+description: File an enhancement request
+labels: [ "enhancement" ]
+body:
+- type: markdown
+  attributes:
+    value: |
+      Thank you for helping us in making Dependency-Track better!
+      
+      **Is the enhancement you'd like to request only UI-related?**
+      We have a dedicated repo for the frontend, please create an issue [there](https://github.com/DependencyTrack/frontend/issues/new/choose)!
+      Unsure? That's fine, just report it here! The maintainers will migrate the issue if necessary.
+      
+      **Please do not ask questions here!**
+      If you'd like to bounce ideas off or wonder whether what you want makes sense,
+      you can reach out to maintainers and the broader community via various channels.
+      Refer to our [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#asking-questions) to find out where and how to ask questions.
+- type: textarea
+  id: behavior-current
+  attributes:
+    label: Current Behavior
+    description: |-
+      Describe the current behavior that you observed.
+      Consider providing screenshots, log output, and other supplementary data.
+      
+      *Files and images can be included via drag and drop into this text field.*
+  validations:
+    required: true
+- type: textarea
+  id: behavior-proposed
+  attributes:
+    label: Proposed Behavior
+    description: >-
+      Describe how you expect Dependency-Track to behave instead.
+      Please include *why* you want the new behavior.
+  validations:
+    required: true
+- type: checkboxes
+  id: checklist
+  attributes:
+    label: Checklist
+    options:
+    - label: I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
+      required: true
+    - label: I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
+      required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,39 @@
+### Description
+
+<!-- REQUIRED
+    Provide a concise description of your change. What does it do? Why is it necessary?
+    As a guideline, think about how you would describe your change if you were to write a changelog entry for it.
+-->
+
+### Addressed Issue
+
+<!-- REQUIRED
+    Reference the issue addressed by this PR, e.g. `#1234`.
+    Use keywords like `closes` or `fixes` to signal that this PR resolves the issue,
+    causing the issue to be closed automatically when the PR is merged:
+        https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword
+-->
+
+### Additional Details
+
+<!-- OPTIONAL
+    If desired, share more technical details about the change here.
+    Elaborating on why you implemented the change the way you did can be super helpful to the reviewer.
+    Did you consider other solutions? Any problems you ran into along the way?
+-->
+
+### Checklist
+
+<!-- REQUIRED
+    Mark items in this list as done by adding a `x` between the square brackets.
+    Non-applicable items may be marked as such by surrounding their text with tildes (`~`).
+
+    This is not meant to be a strict to-do list. If you're unsure about anything,
+    just leave it empty for now. The maintainers are happy to assist you in figuring it out!
+-->
+
+- [ ] I have read and understand the [contributing guidelines](../CONTRIBUTING.md#pull-requests)
+- [ ] This PR fixes a defect, and I have provided tests to verify that the fix is effective
+- [ ] This PR implements an enhancement, and I have provided tests to verify that it works as intended
+- [ ] This PR introduces changes to the database model, and I have added corresponding [update logic](https://github.com/DependencyTrack/dependency-track/tree/master/src/main/java/org/dependencytrack/upgrade)
+- [ ] This PR introduces new or alters existing behavior, and I have updated the [documentation](https://github.com/DependencyTrack/dependency-track/tree/master/docs/_docs) accordingly

.github/dependabot.yml

@@ -0,0 +1,24 @@
+version: 2
+updates:
+  - package-ecosystem: maven
+    directory: /
+    schedule:
+      interval: daily
+    ignore:
+    # Jetty >= 11 is currently not supported by Alpine.
+    # https://github.com/stevespringett/Alpine/issues/402
+    - dependency-name: "org.eclipse.jetty:jetty-maven-plugin"
+      update-types:
+      - version-update:semver-major
+  - package-ecosystem: docker
+    directory: /src/main/docker
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+  - package-ecosystem: bundler
+    directory: /docs
+    schedule:
+      interval: daily

.github/release.yml

@@ -0,0 +1,14 @@
+changelog:
+  categories:
+  - title: Enhancements 🚀
+    labels:
+    - enhancement
+  - title: Bug Fixes 🐛
+    labels:
+    - bug
+  - title: Dependency Updates 🤖
+    labels:
+    - dependencies
+  - title: Other Changes
+    labels:
+    - "*"