Skip to content

The excludes parameter does not work with dependency-check-maven from CLI #4172

Open
@sondemar

Description

Describe the bug
With "Add exclusion filter to cuteoff some dependencies and their transitive" feature we can easily exclude dependencies with selected patterns. Unfortunately, it is not possible to use with the CLI. The reason is that with a definition of the excludes maven parameter the Parameter annotation does not have defined a property attribute which limits us to use this feature from the CLI.

Version of dependency-check used
The problem occurs using version 7.0.0 of the maven plugin but older versions are also affected.

To Reproduce
Steps to reproduce the behavior:

  1. Run DependencyCheck by using mvn command with -Dexcludes=GroupId:ArtifactId:Version for an existing dependency inside project pom.xml
  2. Check the output of run DependencyCheck to make sure GroupId:ArtifactId:Version dependency and all its transitions are not available.

Expected behavior
Upon checking selected project pom.xml GroupId:ArtifactId:Version dependency and all its transitions are not available.

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions