whitesource / unified-agent-distribution

51 stars 48 forks source link

nuget.resolveAssetsFiles discovers internal dependencies #10

Open quasarea opened 3 years ago

quasarea commented 3 years ago

There is not intended behavior with nuget.resolveAssetsFiles=true configuration parameter.

It scans .\obj\project.assets.json and if any entry listed there is considered by scanner as third-party dependency while some of those are if fact internal dependencies on other projects.

the assets file should be scanned with filter on type, so only "type": "package" is listed and "type": "project" is ignored