Open
Description
Description
We detect all dependencies and exclude dev dependencies in scanner
.
This worked well.
But we added test
scope for pom.xml
files - #7414.
And this is a problem for pom.xml
files, because pom.xml
file can contain many dependencies, and users always expect all dependencies to be parsed, even if --iclude-dev-deps
flag is missing.
More details - #7466
We used this logic to avoid splitting caches.
But --icnlude-dev-deps
flag is only available for fs
mode. We use memore
cache for fs
mode, so this is not problem.
So we need to include/exclude dev deps in analyzers.
Discussed in #7466
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status
No status