jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
https://owasp.org/www-project-dependency-check/
Apache License 2.0
6.46k stars 1.28k forks source link

folders on the C root directory return an exception #7152

Open visccyberacct opened 1 week ago

visccyberacct commented 1 week ago

Describe the bug I attempted to run dependency-check on a folder that installs in C:. I reconfirmed this by trying to also scan Program Files with the same exception being thrown. I am unable to generate a log file, I received the same error.

image

Version of dependency-check used The problem occurs using version 11.1.0 of the cli (cli, gradle plugin, maven plugin, etc.)

Log file When reporting errors, 99% of the time log file output is required. Please post the log file as a gist and provide a link in the new issue.

To Reproduce Steps to reproduce the behavior: Run dependency-check on a folder in the root C:\ directory

Expected behavior Previous version of dependency-check did not throw an exception when scanning a root directory folder.

Additional context Add any other context about the problem here.

jeremylong commented 1 week ago

consider escaping the command line argument - like one would need to do for anything containing spaces. Also, using forward slashes helps. Hopefully I get this right; I'm not often on a windows box:

dependency-check -o c:/Program\ Files/