From bb8dae6361e711d25ab232da221848849af657fa Mon Sep 17 00:00:00 2001 From: Hans Aikema Date: Fri, 25 Nov 2022 12:06:01 +0100 Subject: [PATCH] fix: Change dotnet invocation for 'detection on system path' to --info to support runtime-only installs of dotnet (#5087) Fixes isseu #5074 --- .../org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java b/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java index 6694388bc81..94d71673634 100644 --- a/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java +++ b/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java @@ -468,7 +468,7 @@ protected String getAnalyzerEnabledSettingKey() { private boolean isDotnetPath() { final String[] args = new String[2]; args[0] = "dotnet"; - args[1] = "--version"; + args[1] = "--info"; final ProcessBuilder pb = new ProcessBuilder(args); try { final Process proc = pb.start();