diff --git a/core/src/main/java/org/owasp/dependencycheck/analyzer/PoetryAnalyzer.java b/core/src/main/java/org/owasp/dependencycheck/analyzer/PoetryAnalyzer.java index 0d29b5f8875..678e5adea76 100644 --- a/core/src/main/java/org/owasp/dependencycheck/analyzer/PoetryAnalyzer.java +++ b/core/src/main/java/org/owasp/dependencycheck/analyzer/PoetryAnalyzer.java @@ -155,6 +155,10 @@ protected void analyzeDependency(Dependency dependency, Engine engine) throws An } final Toml result = new Toml().read(dependency.getActualFile()); + if (PYPROJECT_TOML.equals(dependency.getActualFile().getName()) && result.getTables("tool.poetry") == null) { + LOGGER.debug("skipping {} as it does not contain `tool.poetry`", dependency.getDisplayFileName()); + return; + } final List projectsLocks = result.getTables("package"); if (projectsLocks == null) { return;