Dependencies with no Version Specified
  • 27 Oct 2021
  • 1 Minute to read
  • Dark
    Light
  • PDF

Dependencies with no Version Specified

  • Dark
    Light
  • PDF

Article Summary

The tile labeled Dependencies No Version Specified provides a count of all dependencies (direct and transitive) which do not have the version specified. For more information on how dependencies are identified, please see Dependency Detection.

Go projects should always have a commit specified in the glide.lock file. Therefore, Go projects should always have zero unversioned dependencies.

Governance:

The Dependency no Version rule governs the pass/fail status of the scan results. When this rule is enabled in the governing ruleset, the analysis will only pass if all dependencies have a version specified.

Tile Statuses:

Passing: All of the project's dependencies include a version, and the governing ruleset requires that dependencies have a version specified.

dependencies_no_version_passed.png

Failing: One or more of the project's dependencies do not specify a version and the governing ruleset requires that dependencies have a version specified.

Warning: The scan has been completed, the governing ruleset does not require that dependencies have a version specified, and dependencies without a specified version were detected.

dependencies_no_version_failed.png

Not Evaluated: The scan has been completed, the governing ruleset does not require that dependencies have a version specified, and no dependencies without a specified version were detected.

dependencies_no_version_not_evaluated.png

Error: An error occurred during the scan or analysis. Selecting the tile will provide information on the cause of the error.

dependencies_no_version_error.png


Was this article helpful?

What's Next