vulncost icon indicating copy to clipboard operation
vulncost copied to clipboard

Published 20 hours ago • verified publisher icon snyk

Don't scan in git diff views

Open st-schneider opened this issue 4 years ago • 2 comments

Currently it seems to run whenever it sees an import. That includes also read-only diff views and also both sides, that seems highly unnecessary since depending on the commit you are looking at, none of the code exists anymore.

st-schneider avatar Apr 29 '20 06:04 st-schneider

Hi, @bm-stschneider thanks for your comment. Currently, it scans when you open a JavaScript, TypeScript, or HTML file and your package.json file. Can you please elaborate on this issue and how to reproduce and we can look if we can make VSCode exclude this view from scanning.

bmvermeer avatar Apr 29 '20 08:04 bmvermeer

just open a javascript file from gitlens from a previous commit or from a comparison of branches and the scan will go off in the diff view of that commit.

st-schneider avatar Apr 29 '20 09:04 st-schneider