The default setting in SOOS does not scan Dev/Test Dependencies, however there is a setting on the Configure page that allows you to enable this feature.

Dependencies matching the following descriptions will also be considered dev dependencies and will be ignored unless Include Dev/Test Dependencies is enabled.

  • Dependencies in manifests (all languages) marked as <optional>.
  • Specific to Java projects: 
    • Dependencies marked with a <scope>test</scope> tag or <scope>import</scope> tag
    • Dependencies listed under a <plugin> section 
    • Dependencies listed under a <profile> section marked with <id>test</id>, <id>debug</id>, <id>demo</id>, or <id>build</id>
Exception:

All scans performed on uploaded manifests via the Manifest Scan feature will initially include Dev Dependencies.  Every subsequent scan of a given manifest will adhere to the saved Dependency Settings.