dependency-check / dependency-check/DependencyCheck

Fetching suppression file through Git

Open
#4,917 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

**Is your feature request related to a problem? Please describe.**
In a setting with multiple microservices, maintaining a suppression file in each service is getting quite tiresome.
Tried using both raw url and git url as suppressionFile, but the first ends up with 404, and the second is handled as a local file path.

**Describe the solution you'd like**
Fetching suppression file from git/bitbucket.
```
suppressionFile = 'git@bitbucket.org:repo.git/path-to-file.xml'
```
**Describe alternatives you've considered**
Adding it as a package seems like an extra step for very little gain

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.