Skip to content

Flip Dependency Scanning analyzer git repo check flag to on

Problem to solve

The DS_FF_LINK_COMPONENTS_TO_GIT_FILES flag was added as part of Link to correct input file when analyzed artifa... (#537716 - closed) • Igor Frenkel • 18.3. It defaulted to off for testing and a soft release and was not meant to be part of the analyzer long term.

Proposal

In order to make this behaviour part of the analyzer by default, the flag should be flipped to "on" in %18.5 by default and removed in a subsequent release.

Implementation plan

%18.5

  • Change flag to default to "on"
  • Update README.md to remove mention of this flag

Subsequent release

  • Remove flag from the analyzer.

Intended users

General analyzer users.

Workarounds and issues

Because Dependency Scanning v2 template does not support this flag, if users need to flip it to off, they would have to override the dependency-scanning job to set this flag's value.

Implementation plan

  • Change inputfile/flags.go default value to true
  • Update README.md with new default value
  • Announce
Edited by Igor Frenkel