You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are two conflicting use cases that needs to be addressed:
Running a fast package scan to only get package information from manifests and lockfiles
Running a more detailed package scan with package assembly and resolving dependencies (but still faster as this is a package-only scan without license/copyrights)
2 was needed for #1244 and is what we have now with package assembly and resolving dependencies through the StaticResolver group, but note that we have the same functionality with the ResolveDependencies pipeline, so it be better perhaps to:
Have the inspect_packages pipeline only do 1.
Have the resolve_dependencies pipeline do 2.
The text was updated successfully, but these errors were encountered:
There are two conflicting use cases that needs to be addressed:
2 was needed for #1244 and is what we have now with package assembly and resolving dependencies through the
StaticResolver
group, but note that we have the same functionality with theResolveDependencies
pipeline, so it be better perhaps to:inspect_packages
pipeline only do 1.resolve_dependencies
pipeline do 2.The text was updated successfully, but these errors were encountered: