-
Notifications
You must be signed in to change notification settings - Fork 588
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve pnpm support #1752
Improve pnpm support #1752
Conversation
02578af
to
99353cb
Compare
Wasn't sure if its better to only parse the |
- Parse packages section from pnpm-lock.yaml to get transitive dependencies. - Should add support for getting dependencies from pnpm-lock.yaml files that use workspaces. - This is due to the fact all dependencies should get listed under the packages section. Closes anchore#1535 Signed-off-by: Shane Dell <shanedell100@gmail.com>
99353cb
to
60cd03f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍
* main: chore(deps): bump modernc.org/sqlite from 1.21.2 to 1.22.0 (#1758) chore: go-rpmdb update (#1757) chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.1-0.20221222100750-41a1ac565cce to 0.7.1 (#1706) fix: Improve pnpm support (#1752) feat: Add template func `hasField` (#1754) fix: only cache java packages and not source content (#1750) Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Signed-off-by: Shane Dell <shanedell100@gmail.com>
Improve pnpm support
Closes #1535