Updated dependency-check-core to v5.1.0 (#77 ). See Release notes of dependency-check v5.1.0 for more details and bugfixes.
Noteworthy changes
- New experimental Golang Dependency and Module analyzers with new setting keys:
dependencyCheckGolangDepEnabled
,dependencyCheckGolangModEnabled
anddependencyCheckPathToGo
- Optional settings to add credentials for OSS Index Analyzer:
dependencyCheckOSSIndexAnalyzerUsername
anddependencyCheckOSSIndexAnalyzerPassword
- Suppression Schema now supports suppressing RetireJS, NSP and OSS Index vulnerabilities. See https://jeremylong.github.io/DependencyCheck/general/suppression.html for examples.