DependencyCheck icon indicating copy to clipboard operation
DependencyCheck copied to clipboard

nuget packages scan - support for CPM (Central Package Management)

Open DomZZ opened this issue 1 year ago • 0 comments

Is your feature request related to a problem? Please describe. We have a very large visual studio solution, thousand of csproj projects. To easier maintenancy of nuget dependencies we enabled CPM (central package management), described here : (https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management#enabling-central-package-management)

This allow to have only one reference to a package version using a specific file (Directory.Packages.props) !

Describe the solution you'd like I would like that DependencyCheck tool scan also Directory.Packages.Props files to know which specific package is used by which project and use the result to scan dependencies vulnerabilities.

DomZZ avatar Jan 18 '24 10:01 DomZZ