snyk / snyk-nuget-plugin

Basic Snyk CLI plugin for .NET support.
Other
5 stars 14 forks source link

feat: [OSM-515] Introducing `dotnet` cli and other prep work #152

Closed dotkas closed 1 year ago

dotkas commented 1 year ago

Background

Picks up where https://github.com/snyk/snyk-nuget-plugin/pull/147 left off.

In terms of the broader project of enabling inclusion of runtime dependency versions to the dependency graph, we here introduce support for running the dotnet CLI from within the plugin. This is a common pattern in other of our ecosystem plugins (e.g. this one for go).

In order to be able to build self-contained published packages, we need to enable the use of dotnet publish.

Further, we already encourage users to run dotnet restore before scanning their dotnet core projects, so we should be able to assume the binary exists on the system.

What does this PR do?

Nothing, actually. No logic (should ™️ ) be changed. But it will make the next PR which hooks up the runtime assembly parsing much cleaner.

What are the relevant tickets?

https://snyksec.atlassian.net/browse/OSM-515

snyksec commented 1 year ago

:tada: This PR is included in version 1.27.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: