You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Run OWASP CLI on node based app with node_gyp as a module
See error
Expected behavior
Pipeline shows that OWASP scan failed with exit code 14, and that a pyproject.toml was found, but no requirements.txt or poetry.lock file.
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered:
Thanks for the report - I agree we should not throw the error if the pyproject.toml is in the node_modules directory.
Additionally, as you are scanning a node application I would highly recommend adding --retirejsFilterNonVulnerable to reduce the overall size of the report and scan time.
Describe the bug
OWASP CLI scanner fails when scanning a node app when the python analyzer finds a node module using a pyproject.toml file.
Version of dependency-check used
The problem occurs using version 8.0.2 of the CLI.
Log file
OWASP DC 8.0.2 Fail
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Pipeline shows that OWASP scan failed with exit code 14, and that a pyproject.toml was found, but no requirements.txt or poetry.lock file.
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: