fix: Add dependencyManagement exclusions to the child exclusions

aquasecurity · Jun 19, 2024 · 2bac371 · 2bac371
1 parent dfe757e
commit 2bac371
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pkg/dependency/parser/java/pom/pom.go b/pkg/dependency/parser/java/pom/pom.go
@@ -268,6 +268,8 @@ func (d pomDependency) Resolve(props map[string]string, depManagement, rootDepMa
 		}
 		if len(dep.Exclusions.Exclusion) == 0 {
 			dep.Exclusions = managed.Exclusions
+		} else if len(managed.Exclusions.Exclusion) > 0 {
+			dep.Exclusions.Exclusion = append(dep.Exclusions.Exclusion, managed.Exclusions.Exclusion...)
 		}
 	}
 	return dep