Skip to content

Investigate remove dependencies with other plugins #196

@ruromero

Description

@ruromero

Currently there is a dependency with Go and Docker plugins due to how the package manager files are processed for the component analysis. The current implementation leverages the plugin's functionalities to extract and manipulate the dependencies info.

The downside of this is that when you install the RHDA plugin you see the Docker plugin as a require dependency regardless of whether your project has any Dockerfile. This causes a bad user experience.
For the Go plugin the problem is similar, if a user only wants to open a Go project and see the issues it shouldn't be required to have the Go extension to generate a report or get notified about a vulnerability issue. Specially because the Go plugin requires Goland or IntelliJ Ultimate.

The VSCode counterpart manipulates the files directly making it more generic and independent.

It would be great if we could investigate the possibility of removing such dependencies and implement a generic solution that does not depend on any additional plugin.

Metadata

Metadata

Assignees

Labels

dependenciesPull requests that update a dependency file

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions