Just to be honest, the question was more about:Is there a way to "trust" some particular dependencies? We would like to keep ACS Commons, on the other hand it would be very hard to fork it and maintain that version which has no concerns on code quality gate.I genuinely don't know that is the answer....

We have Cloud Manager repository which contains project that provides (within "all" submodule) ACS Commons package. This leads to problem that Cloud Manager reports issues from ACS Commons and the report has to be overridden in order to deploy the entire project into AEM instances. From my perspecti...