From 66f374883581a26613ec61c1f2af65bc9a7daef0 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Thu, 14 Nov 2024 05:56:58 -0500 Subject: [PATCH] fix: re-enable Central Analyzer by default Gradle by default does not download the pom.xml from Central - without this false negatives may be generated. resolves https://github.com/dependency-check/dependency-check-gradle/issues/421 --- src/main/resources/task.properties | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/main/resources/task.properties b/src/main/resources/task.properties index 2704088..27f5d16 100644 --- a/src/main/resources/task.properties +++ b/src/main/resources/task.properties @@ -2,5 +2,6 @@ ### Do not define the path here - it is defined in DataExtension ### data.directory=[JAR]/../../dependency-check-data/9.0 -# disable the central analyzer by default -analyzer.central.enabled=false \ No newline at end of file +# disabling the central analyzer can cause False Negatives because +# gradle does not download the pom.xml from central by default. +# analyzer.central.enabled=false \ No newline at end of file