Skip to content

Commit 24b8b1b

Browse files
jdotson166Jacob Dotson
andauthored
Updating the md for vcpkg to reflect some recent updates (#1442)
Co-authored-by: Jacob Dotson <[email protected]>
1 parent d534ee9 commit 24b8b1b

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

docs/detectors/vcpkg.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,10 @@ The vcpkg detector searches for `vcpkg.spdx.json` files produced by vcpkg during
1111
Because this detection strategy looks for the concrete files in the installed tree, it will accurately detect the precise packages used
1212
during this build and exclude packages optionally used on other platforms.
1313

14+
## Enhancements
15+
16+
The latest versions of `Component Detector (>= v5.2.26)` and `VCPKG (>= 2025.02.14)` resolve issues with Vcpkg detection by linking `vcpkg.spdx.json` files to their originating `vcpkg.json` file. This improvement, enabled through the new `manifest-info.json` introduced in `VCPKG`, ensures accurate dependency tracking and streamlines workflows like vulnerability resolution (e.g., Dependabot).
17+
1418
## Known limitations
1519

1620
The vcpkg detector does not distinguish between direct dependencies and transitive dependencies. It also does not distinguish

0 commit comments

Comments
 (0)