DependencyCheck
DependencyCheck copied to clipboard
nuget packages scan - support for CPM (Central Package Management)
Is your feature request related to a problem? Please describe. We have a very large visual studio solution, thousand of csproj projects. To easier maintenancy of nuget dependencies we enabled CPM (central package management), described here : (https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management#enabling-central-package-management)
This allow to have only one reference to a package version using a specific file (Directory.Packages.props) !
Describe the solution you'd like I would like that DependencyCheck tool scan also Directory.Packages.Props files to know which specific package is used by which project and use the result to scan dependencies vulnerabilities.