dependency-check / dependency-check/DependencyCheck

Option not to add information about non-vulnerable dependencies to the html report

Open
#6,545 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

dependency-check-report.html during Multi-Project Build checks in some cases exceeds 300 MB.
At the same time, the csv report is small in size.
After checking the HTML version of the report, I found out that the main volume is occupied by information about all (non-vulnerable) dependencies.
Please add a parameter for the HTML report that will not save information about invulnerable dependencies.

As far as I understand, it will be possible to add a condition in https://github.com/jeremylong/DependencyCheck/blob/main/core/src/main/resources/templates/htmlReport.vsl to the foreach loop on 853 lines.

If this feature is added in the future, will it be available for the gradle plugin?(https://plugins.gradle.org/plugin/org.owasp.dependencycheck)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.