feat(bazel): Add support for archive_override

Archive overrides are dependencies for which the sourcecode comes from a
given URL instead of the location present in the registry's metadata. When
such dependency is present, ORT won't query the registry at all for it and
will also suppress the package version in the dependency tree like Bazel
does in the output of "mod graph".

Fixes oss-review-toolkit#8809.

[1]: https://bazel.build/rules/lib/globals/module#archive_override

Signed-off-by: Nicolas Nobelis <nicolas.nobelis@bosch.com>

clients/bazel-module-registry/src/main/kotlin/Model.kt

@@ -21,6 +21,8 @@ package org.ossreviewtoolkit.clients.bazelmoduleregistry
 
 import io.ks3.java.typealiases.UriAsString
 
+import java.net.URI
+
 import kotlinx.serialization.Serializable
 
 /**
@@ -53,3 +55,13 @@ data class ModuleSourceInfo(
     val stripPrefix: String? = null,
     val url: UriAsString
 )
+
+/**
+ * See https://bazel.build/rules/lib/globals/module#archive_override.
+ */
+data class ArchiveOverride(
+    val moduleName: String,
+    val integrity: String? = null,
+    val patches: List<String>? = null,
+    val urLs: List<URI>
+)

plugins/package-managers/bazel/src/funTest/assets/projects/synthetic/bazel-archive-override/.bazelversion

@@ -0,0 +1 @@
+7.0.1

plugins/package-managers/bazel/src/funTest/assets/projects/synthetic/bazel-archive-override/MODULE.bazel

@@ -0,0 +1,11 @@
+bazel_dep(name = "rules_cuda", version = "0.1.1")
+
+archive_override(
+    module_name = "rules_cuda",
+    integrity = "sha256-3B9PcEylbj1e3Zc/mKRfBIfQ8oxonQpXuiNhEhSLGDM=",
+    patches = [
+        "//rules_cuda_patches:dummy.patch",
+    ],
+    strip_prefix = "rules_cuda-v0.1.2",
+    urls = ["https://github.com/bazel-contrib/rules_cuda/releases/download/v0.1.2/rules_cuda-v0.1.2.tar.gz"],
+)

plugins/package-managers/bazel/src/funTest/assets/projects/synthetic/bazel-expected-output-archive-override.yml

@@ -0,0 +1,140 @@
+---
+project:
+  id: "Bazel::plugins/package-managers/bazel/src/funTest/assets/projects/synthetic/bazel-archive-override/MODULE.bazel:"
+  definition_file_path: "<REPLACE_DEFINITION_FILE_PATH>"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  vcs:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>"
+  vcs_processed:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>"
+  homepage_url: ""
+  scopes:
+  - name: "dev"
+    dependencies: []
+  - name: "main"
+    dependencies:
+    - id: "Bazel::rules_cuda:"
+      linkage: "STATIC"
+      dependencies:
+      - id: "Bazel::bazel_skylib:1.3.0"
+        linkage: "STATIC"
+        dependencies:
+        - id: "Bazel::platforms:0.0.7"
+          linkage: "STATIC"
+      - id: "Bazel::platforms:0.0.7"
+        linkage: "STATIC"
+        dependencies:
+        - id: "Bazel::rules_license:0.0.7"
+          linkage: "STATIC"
+packages:
+- id: "Bazel::bazel_skylib:1.3.0"
+  purl: "pkg:generic/bazel_skylib@1.3.0"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  description: ""
+  homepage_url: "https://github.com/bazelbuild/bazel-skylib"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://github.com/bazelbuild/bazel-skylib/releases/download/1.3.0/bazel-skylib-1.3.0.tar.gz"
+    hash:
+      value: "74d544d96f4a5bb630d465ca8bbcfe231e3594e5aae57e1edbf17a6eb3ca2506"
+      algorithm: "SHA-256"
+  vcs:
+    type: "Git"
+    url: "https://github.com/bazelbuild/bazel-skylib"
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/bazelbuild/bazel-skylib.git"
+    revision: ""
+    path: ""
+- id: "Bazel::platforms:0.0.7"
+  purl: "pkg:generic/platforms@0.0.7"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  description: ""
+  homepage_url: "https://github.com/bazelbuild/platforms"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://github.com/bazelbuild/platforms/releases/download/0.0.7/platforms-0.0.7.tar.gz"
+    hash:
+      value: "3a561c99e7bdbe9173aa653fd579fe849f1d8d67395780ab4770b1f381431d51"
+      algorithm: "SHA-256"
+  vcs:
+    type: "Git"
+    url: "https://github.com/bazelbuild/platforms"
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/bazelbuild/platforms.git"
+    revision: ""
+    path: ""
+- id: "Bazel::rules_cuda:"
+  purl: "pkg:generic/rules_cuda@"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  description: ""
+  homepage_url: ""
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://github.com/bazel-contrib/rules_cuda/releases/download/v0.1.2/rules_cuda-v0.1.2.tar.gz"
+    hash:
+      value: "dc1f4f704ca56e3d5edd973f98a45f0487d0f28c689d0a57ba236112148b1833"
+      algorithm: "SHA-256"
+  vcs:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+- id: "Bazel::rules_license:0.0.7"
+  purl: "pkg:generic/rules_license@0.0.7"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  description: ""
+  homepage_url: "https://github.com/bazelbuild/rules_license"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://github.com/bazelbuild/rules_license/releases/download/0.0.7/rules_license-0.0.7.tar.gz"
+    hash:
+      value: "4531deccb913639c30e5c7512a054d5d875698daeb75d8cf90f284375fe7c360"
+      algorithm: "SHA-256"
+  vcs:
+    type: "Git"
+    url: "https://github.com/bazelbuild/rules_license"
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/bazelbuild/rules_license.git"
+    revision: ""
+    path: ""

plugins/package-managers/bazel/src/funTest/kotlin/BazelFunTest.kt

@@ -64,4 +64,13 @@ class BazelFunTest : StringSpec({
 
         result.toYaml() should matchExpectedResult(expectedResultFile, definitionFile)
     }
+
+    "Dependencies are detected correctly for a project with an archive override" {
+        val definitionFile = getAssetFile("projects/synthetic/bazel-archive-override/MODULE.bazel")
+        val expectedResultFile = getAssetFile("projects/synthetic/bazel-expected-output-archive-override.yml")
+
+        val result = create("Bazel").resolveSingleProject(definitionFile)
+
+        result.toYaml() should matchExpectedResult(expectedResultFile, definitionFile)
+    }
 })