Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

How to ignore dev dependencies in WhiteSource scan for nuget packages

Mehul_Parmar
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 9, 2020

I want to ignore my **SonarAnalyzer.Csharp** and **Sonarlint** package in the C# code WhiteSource scan. They are being captured as Policy Violation.

I checked the documentation, there is no option to ignore checking dev dependencies
<https://whitesource.atlassian.net/wiki/spaces/WD/pages/489160834/Unified+Agent+Configuration+File+Parameters>.

Is there any option that we can provide in the WhiteSource config file to skip it. My packages.config file looks like this.

<?xml version="1.0" encoding="utf-8"?>
<packages>
<package id="SonarAnalyzer.CSharp" version="1.21.0" targetFramework="net461" />
<package id="SonarLint" version="2.0.0" targetFramework="net452" developmentDependency="true" />
</packages>

 

0 answers

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events