* Add a master pom.xml as an entrypoint for dependabot
* Add vulnerable log4j dependency to test dependabot
* Fix pom generation
* Moved bom files to make dependabot recognize them
* Remove dependencies from root pom.xml
* Add local poms as modules, not dependencies
* Revert "Moved bom files to make dependabot recognize them"
This reverts commit 1742e08ed2.
* Revert "Revert "Moved bom files to make dependabot recognize them""
This reverts commit 1f17702f9b.
* Make generate_master_pom.sh executable
* Update README
* Revert "Add vulnerable log4j dependency to test dependabot"
This reverts commit 7d45af18af.
Changes:
- There is one unified docker-compose.yml for both repo and sync
- Both containers are started together, but the maven container spins
until the repo is ready
- The repo is terminated when maven terminates
- The repo is set up at port 80 in the container, 9001 on the host
- The maven container is separated from the host network, only has
connections to the repo