snyk/vulncost

Don't scan in git diff views

st-schneider opened this issue · 2 comments

Currently it seems to run whenever it sees an import. That includes also read-only diff views and also both sides, that seems highly unnecessary since depending on the commit you are looking at, none of the code exists anymore.

Hi, @bm-stschneider thanks for your comment. Currently, it scans when you open a JavaScript, TypeScript, or HTML file and your package.json file.
Can you please elaborate on this issue and how to reproduce and we can look if we can make VSCode exclude this view from scanning.

just open a javascript file from gitlens from a previous commit or from a comparison of branches and the scan will go off in the diff view of that commit.