dependency-check / dependency-check/DependencyCheck

nuget packages scan - support for CPM (Central Package Management)

Open
#6,402 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

**Is your feature request related to a problem? Please describe.**
We have a very large visual studio solution, thousand of csproj projects.
To easier maintenancy of nuget dependencies we enabled CPM (central package management), described here :
(https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management#enabling-central-package-management)

This allow to have only one reference to a package version using a specific file (Directory.Packages.props) !

**Describe the solution you'd like**
I would like that DependencyCheck tool scan also Directory.Packages.Props files to know which specific package is used by which project and use the result to scan dependencies vulnerabilities.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.