dependency-check / dependency-check/DependencyCheck
Option not to add information about non-vulnerable dependencies to the html report
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
dependency-check-report.html during Multi-Project Build checks in some cases exceeds 300 MB.
At the same time, the csv report is small in size.
After checking the HTML version of the report, I found out that the main volume is occupied by information about all (non-vulnerable) dependencies.
Please add a parameter for the HTML report that will not save information about invulnerable dependencies.
As far as I understand, it will be possible to add a condition in https://github.com/jeremylong/DependencyCheck/blob/main/core/src/main/resources/templates/htmlReport.vsl to the foreach loop on 853 lines.
If this feature is added in the future, will it be available for the gradle plugin?(https://plugins.gradle.org/plugin/org.owasp.dependencycheck)
Contributor guide
Assessment
This issue has not been assessed yet.