snyk / snyk-nuget-plugin

Basic Snyk CLI plugin for .NET support.
Other
5 stars 14 forks source link

fix: [OSM-797] Remove `runtime.*` natives from depGraph #194

Closed dotkas closed 9 months ago

dotkas commented 10 months ago

They are very noisy and not particularly useful.

For our case, we are already creating the correct dependencies and their respective runtime version numbers based of our runtime resolution logic. So a dependency will already be System.Net.Http@8.0.0 if running on .NET 8, thus removing the need for a runtime.native.System.Net.Http@8.0.0 as well. From our investigation these runtime native dependencies are causing noise for the customers and are not of interested.

Changes:

snyksec commented 9 months ago

:tada: This PR is included in version 2.2.1 :tada:

The release is available on:

Your semantic-release bot :package::rocket: