I am trying to run a software composition analysis scan on my repository. I'm on windows powershell, so the steps I took to creating an agent for scanning are highlighted here: Install the Veracode SCA Agent with PowerShell • Veracode Software Composition Analysis • Reader

After following those steps, I ran the following scan command:

srcclr scan --allow-dirty --skip-vms

The scan fails with the following error:

Unexpected level of indentation: 6. Line: '   optional: true'.

For some more context, I updated some yarn packages to deal with vulnerabilities in my repo and also the actual yarn framework itself (2.4 to the latest version). It looks like this is an issue with the generated yarn.lock file i.e. the indentation of the `optional: true` flag is incorrect.

I believe the yarn parser built into srcclr may be running on an older version of yarn and thus can't read the lock file. I'm able to run the `yarn` command and that installs packages just fine, so I don't believe there's anything wrong with the lock file.

Finally, this question has been asked before, i.e. Community (veracode.com) but it looks like the thread has been inactive for quite some time. If anyone has any advice on how to deal with this, or if anyone can create a ticket for the Veracode team related to this issue, it would be greatly appreciated.

Thanks so much!