Report on dependencies only

Open ipmb opened this issue 5 years ago • 1 comments

I don't have access to CodeQL yet, but am interested in generating reports just on dependency vulnerabilities. Would you consider a flag that allows this functionality?

Sep 15 '20 17:09 ipmb

That is a good idea and would not be particularly difficult to do.

I am working on some more changes in a TypeScript branch for this project to make it easier for others to collaborate on and will look to rolling this request into those changes.

Oct 30 '20 10:10 peter-murray