OWASP dependency check XML filePath sometimes contains fileName and sometimes doesn't #1819

fniessink · 2021-01-10T12:19:13Z

This can cause Quality-time to consider different dependencies the same if the dependency has no hash.

…In those cases Quality-time would create a hash based on the file path of the dependency. However, file paths aren't necessarily unique across dependencies. Add the file name to the hash to make it unique. Fixes #1819.

#1820) Some dependencies in the OWASP Dependency Check report have no hash. In those cases Quality-time would create a hash based on the file path of the dependency. However, file paths aren't necessarily unique across dependencies. Add the file name to the hash to make it unique. Fixes #1819.

fniessink added the Bug Something isn't working label Jan 10, 2021

fniessink mentioned this issue Jan 10, 2021

Some dependencies in the OWASP Dependency Check report have no hash. … #1820

Merged

fniessink closed this as completed in #1820 Jan 10, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OWASP dependency check XML filePath sometimes contains fileName and sometimes doesn't #1819

OWASP dependency check XML filePath sometimes contains fileName and sometimes doesn't #1819

fniessink commented Jan 10, 2021

OWASP dependency check XML filePath sometimes contains fileName and sometimes doesn't #1819

OWASP dependency check XML filePath sometimes contains fileName and sometimes doesn't #1819

Comments

fniessink commented Jan 10, 2021