We currently build our Kibana plugins in a CI/CD pipeline on a VM with full internet access. As part of a security hardening effort, we are moving this build to an airgapped environment where all dependencies must be resolved from an internal private registry instead of public sources.
Before we can mirror these artifacts internally, we need to enumerate the complete set of dependencies a Kibana plugin build pulls over the network and any other build-time downloads.
Is there a recommended way to generate this complete dependency manifest, or has anyone here set up an airgapped Kibana plugin build and can share their approach?
Thanks in advance.