summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorAlbin <albin@mullvad.net>2022-03-11 11:47:14 +0100
committerAlbin <albin@mullvad.net>2022-04-20 18:00:45 +0200
commit5d4e97b17d447e1ca9acd68fff5dd69fddd14b0f (patch)
tree31058c4af54e2fef70509f869a3b392957fdd8fb
parentc741667e1aa0e7197f8cd06646d75f6a72c3d3c2 (diff)
downloadmullvadvpn-5d4e97b17d447e1ca9acd68fff5dd69fddd14b0f.tar.xz
mullvadvpn-5d4e97b17d447e1ca9acd68fff5dd69fddd14b0f.zip
Exclude e2e lintClassPath from dependency check
-rw-r--r--android/e2e/build.gradle.kts8
1 files changed, 8 insertions, 0 deletions
diff --git a/android/e2e/build.gradle.kts b/android/e2e/build.gradle.kts
index 232e72386c..07e80769db 100644
--- a/android/e2e/build.gradle.kts
+++ b/android/e2e/build.gradle.kts
@@ -94,6 +94,14 @@ tasks.whenTaskAdded {
}
}
+configure<org.owasp.dependencycheck.gradle.extension.DependencyCheckExtension> {
+ // Skip the lintClassPath configuration, which relies on many dependencies that has been flagged
+ // to have CVEs, as it's related to the lint tooling rather than the project's compilation class
+ // path. The alternative would be to suppress specific CVEs, however that could potentially
+ // result in suppressed CVEs in project compilation class path.
+ skipConfigurations = listOf("lintClassPath")
+}
+
dependencies {
implementation(Dependencies.AndroidX.testCore)
implementation(Dependencies.AndroidX.testOrchestrator)