Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support --dev flag #121

Open
Greg-Smulko opened this issue Oct 17, 2022 · 0 comments
Open

Support --dev flag #121

Greg-Smulko opened this issue Oct 17, 2022 · 0 comments

Comments

@Greg-Smulko
Copy link

  • node -v: 16.13.2
  • npm -v: 8.1.2
  • snyk -v: 1.1022.0
  • Command run: snyk monitor ...

Expected behaviour

Dev dependencies should not be reported as a dependency when the --dev flag (see docs) is not passed.

Actual behaviour

The --dev flag is not supported for .NET.

Repro steps

  1. Create a project as follows:
<Project Sdk="Microsoft.NET.Sdk">
    <PropertyGroup>
        <TargetFramework>net6.0</TargetFramework>
    </PropertyGroup>
    <ItemGroup>
        <PackageReference Include="Microsoft.VisualStudio.Threading.Analyzers" Version="17.3.44" />
    </ItemGroup>
</Project>
  1. Build, grab project.assets.json file
  2. Run snyk monitor against that file

Please note that the Microsoft.VisualStudio.Threading.Analyzers NuGet package has developmentDependency=true set in their nuspec file (see <developmentDependency>true</developmentDependency> in https://www.fuget.org/packages/Microsoft.VisualStudio.Threading.Analyzers/17.3.44).

Notes

I believe that <developmentDependency>true</developmentDependency> in NuSpec translates to "suppressParent": "All" in project.assets.json file.

@github-actions github-actions bot added the Stale label Jul 16, 2023
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Jul 24, 2023
@dotkas dotkas reopened this Dec 16, 2023
@github-actions github-actions bot removed the Stale label Dec 17, 2023
@github-actions github-actions bot added the Stale label Feb 16, 2024
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Feb 24, 2024
@dotkas dotkas reopened this May 1, 2024
@github-actions github-actions bot removed the Stale label May 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants