From 0935a0ec0105223eb54c37802b868a73a8b33c2f Mon Sep 17 00:00:00 2001 From: Hans Aikema Date: Wed, 23 Nov 2022 19:39:56 +0100 Subject: [PATCH] fix: Change dotnet invocation for 'detection on system path' to --info to support runtime-only installs of dotnet Fixes isseu #5074 --- .../org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java b/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java index 6694388bc81..94d71673634 100644 --- a/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java +++ b/core/src/main/java/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java @@ -468,7 +468,7 @@ protected String getAnalyzerEnabledSettingKey() { private boolean isDotnetPath() { final String[] args = new String[2]; args[0] = "dotnet"; - args[1] = "--version"; + args[1] = "--info"; final ProcessBuilder pb = new ProcessBuilder(args); try { final Process proc = pb.start();