AParida (Community Member) asked a question.
While doing SCA Agent scan for a jar file, we are getting error as 'com.sourceclear.agent.FatalException: Unable to collect Git metadata\nVeracode SCA only supports git repos and requires an executable git to be on the PATH'.
But as per SCA agent scan doc: --scan-collectors - Specify which build types to scan, rather than scanning all discovered build systems by default. Configuration options are: pip, maven, gradle, npm, gem, ant, bower, jar, yarn, cocoapods, sbt, "go get", godep, govendor, glide, ivy, trash, composer, MSBuildDotNet
The command we are using is: curl -sSL https://download.sourceclear.com/ci.sh | bash -s -- scan --scan-collectors "jar" --debug --json scaresults.json
Anything we are missing here for scanning the jar?
.png){kind=logo}
Hello @AParida (Community Member) ,
GIT is required in order to run scans or you can set SCM variables. If you are sure it is git, the git files may just exist elsewhere in the repo and you can add this parameter to see if it helps: --recursive
There is a Knowledgebase Article, SourceClear Error: Unable to collect Git metadata that I would also read to see if the information provided in it can assist you in the issue.
Jason
Veracode Support Engineer