-
Notifications
You must be signed in to change notification settings - Fork 23
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Problem
When running scanoss-py scan --dependencies, the dependencies contained in skipped folders are still reported. The matches are ignored as expected.
Reproducing
mkdir -p ignore-depenencies/ignore-me && cd ignore-depenencies- Match to be ignored:
curl https://raw.githubusercontent.com/jgm/pandoc/69df27105003425a67efd149a7bd81d944915535/data/templates/default.opendocument > ignore-me/default.opendocument - Dependency to ignore:
echo pytest > ignore-me/requirements.txt - Create dummy file to prevent warning:
echo "Prevent 'Warning: No files found to scan in folder: .'" > dummy - Ignore the ignore-me directory:
cat << EOF > scanoss.json { "settings": { "skip": { "patterns": { "scanning": [ "ignore-me/" ] }, "sizes": {} } }, "bom": {} } EOF
- Observe problem:
$ scanoss-py scan --dependencies . Loading settings file scanoss.json... Searching . for dependencies... Searching . for files to fingerprint... Fingerprinting \ Scanning |################################| 1/1 Retrieving dependency data... { "dummy": [ { "id": "none", "server": { "elapsed": "0.000186s", "flags": "0", "hostname": "p16", "kb_version": { "daily": "25.12.09", "monthly": "25.11" }, "version": "5.4.19" } } ], "ignore-me/requirements.txt": [ { "dependencies": [ { "component": "pytest", "licenses": [ { "is_spdx_approved": true, "name": "MIT", "spdx_id": "MIT" } ], "purl": "pkg:pypi/pytest", "url": "https://pypi.org/project/pytest", "version": "9.0.2" } ], "id": "dependency", "status": "pending" } ] }
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request