JSalas140740 (Community Member) asked a question.
Are SCA scans done as part of a Static Scan?
Why do past static scans include SCA scan output/results but recent static scans on new Application profiles dont?
Hello, I have performed several static scans on existing applications via application profiles. I recently created a new application profile and conducted a static scan. I intiated the static scan from Visual Studio 2019 similar to the other scans. I do see that the open source code was uploaded and presumably scanned. Please advise why i dont see any SCA output results in the Veracode > Application > Software Composition Analysis section. I dont remember adding SCA modules/code via the platform upload steps. It was all included when done from Visual Studio 2019.
.png){kind=logo}
Hello @JSalas140740 (Community Member) ,
Without knowing more details about the application(s) that are having this issue, I would suggest an equivalent manual scan be attempted and the results checked to verify it matches what is being uploaded through the Visual Studio Extension.
If that does not point out the issue, I would suggest you contact our technical support team. Here's how you can log a case:
Jason
Veracode Support Engineer