evyaroshevich comments

Repositories
Issues
Comments

Results 5 comments of


                                            evyaroshevich

Global Suppression for Withdrawn or Rejected CVEs/Vulnerabilities

PR +1

Flutter packages (pub) get vulnerability from npm

@nscuro Analyzer NVD ![image](https://github.com/DependencyTrack/dependency-track/assets/42962140/ebb4ce41-1487-4902-bb55-84eadc6ba233)

Flutter packages (pub) get vulnerability from npm

Hi @ostannar I'm using a universal generator CycloneDX/cdxgen

add skip copy-dependencies parameters

@prabhu I am not using the 'deep' or 'resolve class mode' parameters. After some debugging, I discovered that 'mvn dependency:copy-dependencies' was being triggered due to the '--include-crypto' parameter.

add skip copy-dependencies parameters

@prabhu "In my project, for now, I simply removed the '--include-crypto' parameter to maintain the pipeline's functionality. It's quite strange that this specific parameter triggered the 'copy-dependency' step. I'm trying...