trivy
trivy copied to clipboard
feat(yarn): add workspace as dependencies and use `workspace` relationship for them
Description
We currently don't expose workspace as separate packages (only define direct and indirect dependencies on them).
After #7889 we can add them with the workspace relationship.
Required changes:
- detect workspace packages from
path/to/workspace/package.jsonfiles. - use
workspacerelationship for these packages - add relationships between workspaces and direct packages of workspaces.
- ??? detect project id from root
package.jsonfile to addrootpackage (@knqyf263 wdyt?) and add workspaces as dependencies of root package
??? detect project id from root package.json file to add root package (@knqyf263 wdyt?) and add workspaces as dependencies of root package
Yes, we should do that.