fix: add pnpm-lock.yaml to default scan set (#407)

dependency-check · Sep 1, 2024 · 8444a32 · 8444a32
1 parent 6a96550
commit 8444a32
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/groovy/org/owasp/dependencycheck/gradle/tasks/AbstractAnalyze.groovy b/src/main/groovy/org/owasp/dependencycheck/gradle/tasks/AbstractAnalyze.groovy
@@ -441,7 +441,7 @@ abstract class AbstractAnalyze extends ConfiguredTask {
             List<String> toScan = ['src/main/resources', 'src/main/webapp',
                                    './package.json', './package-lock.json',
                                    './npm-shrinkwrap.json', './yarn.lock',
-                                   './pnpm.lock', './Gopkg.lock', './go.mod']
+                                   './pnpm.lock', 'pnpm-lock.yaml', './Gopkg.lock', './go.mod']
             toScan.each {
                 File f = project.file it
                 if (f.exists()) {