I have been looking for similar solution and the whitelist used to fail with other tools as they weren't resolving the dependencies.