Skip to content

enhancement(report): include/exclude dev deps in analyzers #7476

Open
@DmitriyLewen

Description

@DmitriyLewen

Description

We detect all dependencies and exclude dev dependencies in scanner.
This worked well.
But we added test scope for pom.xml files - #7414.
And this is a problem for pom.xml files, because pom.xml file can contain many dependencies, and users always expect all dependencies to be parsed, even if --iclude-dev-deps flag is missing.
More details - #7466

We used this logic to avoid splitting caches.
But --icnlude-dev-deps flag is only available for fs mode. We use memore cache for fs mode, so this is not problem.

So we need to include/exclude dev deps in analyzers.

Discussed in #7466

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status

No status

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions