aquasecurity / go-dep-parser

Dependency Parser for Multiple Programming Languages
MIT License
145 stars 109 forks source link

fix(pom): don't remove excluded deps from upper pom's #282

Closed DmitriyLewen closed 10 months ago

DmitriyLewen commented 10 months ago

Description

Fixed cases where we were removing excluded deps from upper pom's. Example - https://github.com/aquasecurity/trivy/issues/5827 Test to better understand the fix - https://github.com/aquasecurity/go-dep-parser/blob/bf1b2d1cb5f5ad139c03d378674969ecd410d335/pkg/java/pom/parse_test.go#L689-L725