trivy icon indicating copy to clipboard operation
trivy copied to clipboard

feat(dart): use minimum SDK version for packages that use SDK for package version

Open DmitriyLewen opened this issue 1 year ago • 0 comments

Description

Some dart packages use SDK version as package versions. But pubspec.lock and pubspec.yaml files contain version range for SDK. More details here - https://github.com/aquasecurity/trivy/discussions/5984#discussioncomment-8229400

### Tasks
- [x] use minimum SDK version for packages that use SDK for package version
- [x] add log message about using minimum SDK version from range

Discussed in https://github.com/aquasecurity/trivy/discussions/5984

DmitriyLewen avatar Jan 29 '24 08:01 DmitriyLewen