dependency-check / dependency-check/azuredevops

Adding a suppression xml causes step to fail

Open
#86 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
53
Forks
35
PR merge metrics
No merged PRs in 30d

Description

Scan runs correctly and produces report.

However, when I add a suppression file the scan fails with the error below

![image](https://user-images.githubusercontent.com/41908555/124145853-13a4b900-da85-11eb-8b03-63fa822e3c81.png)

Looking at the Logs I can see that there is a warning..

[WARN] Unable to create temp file for suppression file'D:\a\15\s\$\XXXX\DependencySuppression\DependencySupression20210630.xml'

Followed by:

[ERROR] Exception occurred initializing Vulnerability Suppression Analyzer.

YAML:

steps:
- task: dependency-check.dependencycheck.dependency-check-build-task.dependency-check-build-task@6
displayName: 'Dependency Check'
inputs:
projectName: 'XXXXMain'
scanPath: '$/XXXX/Main'
suppressionPath: '$/XXXX/DependencySuppression/DependencySupression20210630.xml'
warnOnCVSSViolation: true

XML file is under source control .

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.