Skip to content

Commit

Permalink
docs: update coverage page
Browse files Browse the repository at this point in the history
  • Loading branch information
DmitriyLewen committed Jul 15, 2024
1 parent 2725e2c commit 21c6cd3
Showing 1 changed file with 3 additions and 6 deletions.
9 changes: 3 additions & 6 deletions docs/docs/coverage/language/dotnet.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,15 +21,12 @@ The following table provides an outline of the features Trivy offers.
## *.deps.json
Trivy parses `*.deps.json` files. Trivy currently excludes dev dependencies from the report.

!!! note
Trivy only includes runtime dependencies in the report.

## packages.config
Trivy only finds dependency names and versions from `packages.config` files. To build dependency graph, it is better to use `packages.lock.json` files.

### libraries built into .NET Core
[libraries section][net-core-libraries] of `*deps.json` file may contain dependencies that included to `.NET Core` (dependencies with empty `runtime`, `runtimeTarget` and `native` fields in [target][net-core-target] section).
These dependencies are not needed by the runtime, and the `dotnet build` command doesn't create `*.dll` files for them.

Trivy marks these dependencies as the development dependencies and skip them by default. If you need to show them, use the `--include-dev-deps` flag.

## *Packages.props
Trivy parses `*Packages.props` files. Both legacy `Packages.props` and modern `Directory.Packages.props` are supported.

Expand Down

0 comments on commit 21c6cd3

Please sign in to comment.