debricked / cli

Debricked's command line interface. It brings open source security, compliance and health to your project via the command prompt.

MIT License

19 stars 8 forks source link

Fingerprint improvements #184

Closed emilwareus closed 5 months ago

emilwareus commented 5 months ago

It is common in nuget to auto-generate a "[Content_Types].xml" file with some information. This file does not help to uniquely identify a package, and there can be quite some overlap between different packages. This results in false positives in our fingerprinting, and I'd like to exclude that fille.

github-actions[bot] commented 5 months ago

CodeScene PR Check

View detailed results in CodeScene


Code Health Quality Gates	✅ OK
Recommended Review Level	Lightweight sanity check
Declining Code Health	0 findings(s) 🚩
Improving Code Health	0 findings(s) ✅
Affected Hotspots	0 files(s) 🔥

Absence of Expected Change Pattern

cli/internal/fingerprint/fingerprint.go is usually changed with: cli/internal/fingerprint/fingerprint_test.go