dependency-check / dependency-check/DependencyCheck
Fetching suppression file through Git
Open
enhancement
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
**Is your feature request related to a problem? Please describe.**
In a setting with multiple microservices, maintaining a suppression file in each service is getting quite tiresome.
Tried using both raw url and git url as suppressionFile, but the first ends up with 404, and the second is handled as a local file path.
**Describe the solution you'd like**
Fetching suppression file from git/bitbucket.
```
suppressionFile = 'git@bitbucket.org:repo.git/path-to-file.xml'
```
**Describe alternatives you've considered**
Adding it as a package seems like an extra step for very little gain
Contributor guide
Assessment
This issue has not been assessed yet.