Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Example Scan Path is Incorrect #19

Closed
foundinhim opened this issue Nov 11, 2019 · 3 comments
Closed

Example Scan Path is Incorrect #19

foundinhim opened this issue Nov 11, 2019 · 3 comments

Comments

@foundinhim
Copy link

foundinhim commented Nov 11, 2019

I really appreciate this task! Thank you. I think I found the following issue with the example:

The example image shows the value **/*csproj:

Doesn't this mean scan the actual project file as a dependency rather than looking at all of the *.dlls used by the program? When I changed it to check the actual *.dlls, it found some vulnerable dependencies.

@ejohn20
Copy link
Collaborator

ejohn20 commented Nov 12, 2019

The screenshot is just showing an example how to set the --scan option. Consult the Documentation for the valid options.

Depending on the version of .NET you are using, the .csproj scan may or may not work. In .NET Core, the .csproj files have the list of package references that need to be scanned. The example above is scanning a .NET Core project file format.

Earlier versions use the packages.config file to list the references. Even earlier versions not using the packages.config file need to have the .dll scanned to find the references.

@ejohn20 ejohn20 closed this as completed Nov 12, 2019
@foundinhim
Copy link
Author

Thank you very much 😄

@ejohn20
Copy link
Collaborator

ejohn20 commented Nov 12, 2019

You're welcome. Let us know if you run into any issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants