Skip vulnerabilities scan
andeliero opened this issue · comments
Hello, could be possible to skip the vulnerabilities scan for a specific dependency or at least throw a warning?
Hi @andeliero,
you can use the suppression.xml file to ignore certain packages, files or CVEs. Please check the docs of the core library for details of the file format: https://jeremylong.github.io/DependencyCheck/general/suppression.html
You can pass the file location to sbt-dependecy-check with the dependencyCheckSuppressionFiles Setting.
Danke schön