jfrog-idea-plugin icon indicating copy to clipboard operation
jfrog-idea-plugin copied to clipboard
verified publisher icon jfrog

ScanConfig: add "indirect-cve-whitelist" to scanner YAML configuration

Open srmish-jfrog opened this issue 2 years ago • 0 comments

Add support for applicability scanning of indirect (transitive) CVEs. This is done by sending a separate list of detected indirect CVEs (indirect-cve-whitelist) to the applicability scanner YAML configuration file.

Also requires an update of "Analyzer Manager" to version 1.6.0

Reference implementation from VSC plugin - https://github.com/jfrog/jfrog-vscode-extension/pull/450

srmish-jfrog avatar Dec 13 '23 07:12 srmish-jfrog