Skip vulnerabilities scan
andeliero opened this issue · 2 comments
andeliero commented
Hello, could be possible to skip the vulnerabilities scan for a specific dependency or at least throw a warning?
albuch commented
Hi @andeliero,
you can use the suppression.xml file to ignore certain packages, files or CVEs. Please check the docs of the core library for details of the file format: https://jeremylong.github.io/DependencyCheck/general/suppression.html
You can pass the file location to sbt-dependecy-check
with the dependencyCheckSuppressionFiles
Setting.
andeliero commented
Danke schön