ANeacșu964237 (Community Member) asked a question.
I am trying to upgrade to Yarn v3 which changed the yarn.lock file a bit. Now SRCCLR is failing with message "Unexpected level of indentation: 6. Line: ' optional: true'."
What versions of Yarn does SRCCLR support?
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Hello @ANeacșu964237 (Community Member) ,
Thank you for reaching out to the Community.
I would suggest reviewing the Supported Languages and Tools for Agent-Base Scans . I have provided the link below.
https://help.veracode.com/r/c_sc_supported_lang
Best regards,
Steven
Veracode Support Engineer
I have reviewed the Supported Languages. Yarn version is not mentioned.
Did you read my question?
Hi @ANeacșu964237 (Community Member) ,
I apologize for the miss-communication
I was talking to a team member and they suggest to regenerate the yarn.lock file...
From the error it seems like it's corrupted or something. Maybe the upgrade threw the indentation off.
Thank you,
Steven
The yarn.lock file is not corrupted. The project runs and builds correctly.
Yarn 3 migration guide even has a step to migrate the lock file from the old format to the new:
https://yarnpkg.com/getting-started/migration#step-by-step
It adds a new level of indentation that perhaps SourceClear doesn't interpret correctly, expecting the lock file to only include 2 levels of indentation.
Example yarn.lock for Yarn 1:
```
"some-dependency@^1.0.0":
version "1.0.0"
resolved "..."
integrity sha512-/...
dependencies:
"sub-dependency" "^1.0.0"
```
Example yarn.lock for Yarn 3:
```
"some-dependency@npm:^1.0.0":
version: 1.0.0
resolution: "some-dependency@npm:1.0.0"
dependencies:
"sub-dependency": ^1.0.0
peerDependencies:
react: ^16.8.0 || ^17.0.0
peerDependenciesMeta:
react:
optional: true <-------- 6 spaces indentation
checksum: ...
languageName: node
linkType: hard
```
SourceClear CI step output:
```
Veracode SCA agent scanning engine ready
Running the Yarn scanner
Processing results...
Processing results complete
Unexpected level of indentation: 6. Line: ' optional: true'.
Exited with code exit status 1
```