dependency-check / dependency-check/azuredevops
[Bug] Adding parameters
- Dominant language
- TypeScript
- Stars
- 53
- Forks
- 35
- PR merge metrics
- No merged PRs in 30d
Description
Hi,
When you specify additionalArguments such as cveUrls in the task ([for workaround purpose here](https://github.com/jeremylong/DependencyCheck/issues/3306)) then the generated command fails :
`C:\Windows\system32\cmd.exe /D /S /C "D:\a\_tasks\dependency-check-build-task_47ea1f4a-57ba-414a-b12e-c44f42765e72\6.0.2\dependency-check\bin\dependency-check.bat --project "MyProjetct" --scan D:\a\1\s --out D:\a\1\TestResults\dependency-check --format JUNIT --cveUrlModified "https://freedumbytes.gitlab.io/setup/nist-nvd-mirror/nvdcve-1.1-modified.json.gz --cveUrlBase" https://freedumbytes.gitlab.io/setup/nist-nvd-mirror/nvdcve-1.1-%d.json.gz"`
Here was the task configuration :
`additionalArguments: '--cveUrlModified https://freedumbytes.gitlab.io/setup/nist-nvd-mirror/nvdcve-1.1-modified.json.gz --cveUrlBase https://freedumbytes.gitlab.io/setup/nist-nvd-mirror/nvdcve-1.1-%d.json.gz`
Thanks for help
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the task's handling of the additionalArguments configuration and reproduce the generated Windows command using the cveUrls example from the issue. Done means arguments such as --cveUrlModified and --cveUrlBase remain separate command-line arguments and the generated dependency-check command no longer fails.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- devops
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100