albuch/sbt-dependency-check

Skip vulnerabilities scan

andeliero opened this issue · 2 comments

Hello, could be possible to skip the vulnerabilities scan for a specific dependency or at least throw a warning?

Hi @andeliero,
you can use the suppression.xml file to ignore certain packages, files or CVEs. Please check the docs of the core library for details of the file format: https://jeremylong.github.io/DependencyCheck/general/suppression.html
You can pass the file location to sbt-dependecy-check with the dependencyCheckSuppressionFiles Setting.

Danke schön