Skip to content

npm workspace filtering#1798

Open
dterrybd wants to merge 4 commits into
masterfrom
dev/dterry/IDETECT-5076-npm-workspace-filtering-review
Open

npm workspace filtering#1798
dterrybd wants to merge 4 commits into
masterfrom
dev/dterry/IDETECT-5076-npm-workspace-filtering-review

Conversation

@dterrybd

Copy link
Copy Markdown
Contributor

This PR adds two new configuration properties — detect.npm.excluded.workspaces and detect.npm.included.workspaces that let users control which npm workspaces are included in a Detect scan.

Workspaces are identified by their path relative to the project root (e.g. packages/react-components), matching the existing convention used by the equivalent Yarn properties (detect.yarn.excluded.workspaces / detect.yarn.included.workspaces). Both the lockfile path (NpmLockfilePackager) and the CLI path (NpmCliParser) respect the filter, and glob wildcards are supported (e.g. packages/internal-*). By default all workspaces are included; the exclude list takes precedence over the include list when both are specified.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant