GitLab security products have been constantly improving support for different build tools and programming languages.

My recent contribution to License compliance allows now to inject commands SETUP_CMD environment variable to the core to bypass the package manager auto-detection and make use of the ./gradlew Gradle wrapper script.

For example:

include:
  - template: Security/License-Scanning.gitlab-ci.yml

variables:
   SETUP_CMD: sh my-custom-install-script.sh

In this example, my-custom-install-script.sh is a shell script at the root directory of your project.