Skip to content

Commit

Permalink
Update list of files used to scan dependencies from (#1900)
Browse files Browse the repository at this point in the history
  • Loading branch information
@antoinebrl
antoinebrl authored Jan 17, 2025
1 parent e174be6 commit 1184db4
Showing 1 changed file with 13 additions and 8 deletions.
21 changes: 13 additions & 8 deletions docs/writing-rules/experiments/project-depends-on.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -70,14 +70,19 @@ A finding is only considered reachable if the file containing the pattern match

## r2c-internal-project-depends-on language support

| Language | Namespace | Scans dependencies from |
|:---------- |:-----------|:---------------------------------|
| Python | pypi | `Pipfile.lock` |
| JavaScript | npm | `yarn.lock`, `package-lock.json` |
| Java | maven | `pom.xml` |
| Go | gomod | `go.mod` |
| Ruby | gem | `Gemfile.lock` |
| Rust | cargo | `cargo.lock` |
| Language | Namespace | Scans dependencies from |
|:---------- |:-----------|:--------------------------------------------------------------|
| C# | nuget | `packages.lock.json` |
| Dart | pub | `pubspec.lock` |
| Elixir | hex | `mix.lock` |
| Go | gomod | `go.mod` |
| Java | maven | `pom.xml` |
| JavaScript | npm | `yarn.lock`, `package-lock.json`, `pnpm-lock.yaml` |
| PHP | composer | `composer.lock` |
| Python | pypi | `*requirement*.txt`, `Pipfile.lock`, `poetry.lock`, `uv.lock` |
| Ruby | gem | `Gemfile.lock` |
| Rust | cargo | `Cargo.lock` |
| Swift | swiftpm | package.swift |

## Limitations

Expand Down

0 comments on commit 1184db4

Please sign in to comment.