Skip to content

It is possible to force jf audit to calculate nuget dependencies? #3280

@ptc-96

Description

@ptc-96

Hello,

I am trying to run a jf audit in a dotnet project during an azuredevops pipeline :

(jf audit --exclusions=".git;node_modules;target;venv;test;.vcxproj;.vcxproj.filters;*.sln;*yml;yaml;.js;npm;" --mvn=false --npm=false --pip=false --pipenv=false --pnpm=false --licenses=true --sca --secrets --iac --sast --without-contextual-analysis)

but I'm having a problem I don't understand.

When I do simply dotnet restore, then jf audit does this stage :

12:04:49 [Info] Calculating NuGet dependencies...
12:04:50 [Info] Calculating NuGet dependencies...

And jf audit is working without problems.

However, if I do the restore using ArtifactoryDotnetCore@1 task, jf audit seems to skip this part of nuget dependency calculation and then an error is thrown:

failed to generate SBOM for app: failed to build dependency tree: failed getting artifactory repository config: failed while reading nuget.yaml config file: Server ID 'someservername' does not exist.
please run 'jf dotnet-config' with your resolver repository information

Is this a known error? Has anyone else experienced it before?

Is there any way to force the audit to perform this calculation?

Thanks for help!!

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions