The Gemnasium maven plugin helps you manage your projects dependencies with Gemnasium. Gemnasium keeps track of projects dependencies and send notifications when new versions are released or security advisories are published.
How would I go about using the Maven plugin without having to manually invoke it.
I want Travis CI to be able to call plugin, but in order to do that, the API key would need to be checked into version control, which obviously would be a bad thing. How would Travis CI users use this Maven plugin in a secure way?
For convenience, the create-project command will try to create a gemnasium.properties file to store the projectSlug (and you're free to add other settings there).
Though, the file creation may fail and this should not raise an error but just log a warning message instead.