uv

Black Duck Detect

Version
latest

Exclude UV Dependency Groups

--detect.uv.dependency.groups.excluded

Set this value to indicate which UV dependency groups Detect should exclude from the BOM.

When specified, a pyproject.toml file and uv executable are required, or pyproject.toml file and either uv.lock or requirements.txt file are required. Components and related dependencies that belong to excluded groups will not be in the BOM unless the component also belongs to a non-excluded group. For example, to recursively exclude all components under the `[dependency-groups]` section of `pyproject.toml`: `detect.uv.dependency.groups.excluded='dev,abc'`. Note: In uv, `[project.optional-dependencies]` defines extras. Each extra (e.g., postgres, redis, mysql) is treated as its own dependency group. The group `optional` does not exist; therefore, specifying it in the `--detect.uv.dependency.groups.excluded` flag will have no impact.

Details  
Added 10.5.0
Type String List
Default Value  
Comma Separated Yes
Case Sensitive Yes
Acceptable Values Any
Strict No

uv Executable

--detect.uv.path

The path to the uv executable.

Details  
Added 10.5.0
Type Optional Path
Default Value  
Comma Separated No
Case Sensitive No
Acceptable Values Any
Strict No

Include Only the Specified UV Dependency Groups (Advanced)

--detect.uv.dependency.groups.only

A comma-separated list of dependency group names to exclusively include in the BOM.

When set, Detect scans only the named groups defined under [dependency-groups] in pyproject.toml. Main project dependencies and optional extras ([project.optional-dependencies]) are excluded from the scan.

Example: detect.uv.dependency.groups.only=dev,lint

Requires a pyproject.toml-based project. Setting this property on a project using setup.py or setup.cfg has no effect and a warning is logged.

If a group appears in both this property and detect.uv.dependency.groups.excluded, the excluded setting takes precedence for overlapping groups and that groups will not be scanned. Detect logs a warning when both properties overlap.

Details  
Added 12.0.0
Type String List
Default Value  
Comma Separated Yes
Case Sensitive Yes
Acceptable Values Any
Strict No

uv Exclude Workspace Members (Advanced)

--detect.uv.excluded.workspace.members

A comma-separated list of uv workspace members to exclude.

If set, Detect will only exclude those project members specified via this property when examining the uv project for dependencies.

Details  
Added 10.5.0
Type String List
Default Value  
Comma Separated Yes
Case Sensitive Yes
Acceptable Values Any
Strict No

uv Include Workspace Members (Advanced)

--detect.uv.included.workspace.members

A comma-separated list of uv workspace members to include.

If set, Detect will only include those uv workspace members specified via this property when examining the uv project for dependencies, unless the member is set for exclusion. Exclusion rules take precedence over inclusion. Leaving this property unset implies 'include all'.

Details  
Added 10.5.0
Type String List
Default Value  
Comma Separated Yes
Case Sensitive Yes
Acceptable Values Any
Strict No