evalle (Partner) asked a question.
SCA maven plugin configuration
Hi,
We're working on SCA maven plugin, but we have a question regarding the "update advisor" option in the maven plugin, does this parameter exists in the configuration of the plug in? or we can have an update-advisor in using the maven plugin?
If this option does not exists in the maven plugin configuration there is a road map to enable it? Or the only way to execute a "update-advisor" it's with the SCA based agent?
Also sometimes when we use the SCA based agent with the update-advisor option there are vulnerabilities, but no recommendations about an update or how can we mitigated, What's the reason of this?
.png){kind=logo}
Hello @evalle (Partner) ,
I see that you reached out to our Support Team with this inquiry and they stated it was unclear where or how to the update-advisor parameter in the SCA maven plugin and only appears to use update-advisor is through the SCA agent.
At the current time, this functionality is not on any roadmap but would check to see if it is listed in the Ideas section of the Community. If it is not, please add it because the more community support an Idea receives, the more likely it will be considered or prioritized for implementation.
Jason
Veracode Support Engineer