search

github / dependency-submission-toolkit

A TypeScript library for creating dependency snapshots.
MIT License
46 stars 10 forks source link

Clearer documentation regarding branches shown #46

Closed Gby56 closed 10 months ago

Gby56 commented 1 year ago

Hello ! We're currently playing with the Maven submission toolkit, and I think this is nowhere to be found, but it seems like the "Insights" dependency section of a repository is only showing the default branch submissions/detections of dependencies right ? This led me down a rabbit hole, I noticed the submission API has a notion of ref for the branch scanned/analyzed, but we're testing things on a non-default branch and it's not showing the dependencies anywhere.

Are there any plans to show different dependency graphs for each branch ? We play with other SCA scanners and we can switch branches, which makes sense for maintenance branches etc...

Thanks !

febuiles commented 10 months ago

@Gby56 Apologies for the very late reply! Dependency Graph does not support branches outside of the default one. I think the toolkit should work just fine if support was to be added, but I don't know about any plans to do that in the short term.