We are getting this message every time during the sca scan: "Workspace-level agents are not allowed to override the workspace. Remove workspace option when scanning." Even testing with differents slugs.

robertoclopesbv (Community Member) asked a question.

December 23, 2022 at 12:40 PM

We are getting this message every time during the sca scan: "Workspace-level agents are not allowed to override the workspace. Remove workspace option when scanning."

Even testing with differents slugs.

Bellow follows information about the Jenkins job:

2022-12-22/18:07:07.621 com.sourceclear.agent.services.ScanServiceImpl DEBUG CollectionResult.scanAttributes (confidential values not printed) := <<

{"NODE_MODULES":false,"WORKSPACE_SLUG":"000tqv1","INSTALL_FIRST":false,"API_BASE_URI":"https://api.sourceclear.io/","DISABLE_FIPS":false,"FORCE_GO_INSTALL":false,"REPO_URL":"","APK_PROPERTY":false,"ALLOW_NO_BUILD_SYSTEM":false,"COMPILE_FIRST":true,"SCAN_COLLECTORS":"","SKIP_COLLECTORS":"","BOWER_COMPONENTS":false,"FAT_JAR":false}

2022-12-22/18:07:07.621 com.sourceclear.agent.services.ScanServiceImpl DEBUG CollectionResult.filesScanned := 0

2022-12-22/18:07:07.621 com.sourceclear.agent.services.ScanServiceImpl DEBUG CollectionResult.lineCount := 30

2022-12-22/18:07:07.622 com.sourceclear.agent.services.ScanServiceImpl DEBUG CollectionResult.methodsSupported := true

2022-12-22/18:07:07.622 com.sourceclear.agent.commands.ScanCommand DEBUG FailOn was not specified.

2022-12-22/18:07:07.623 com.sourceclear.util.io.GitUtils DEBUG SRCCLR_GIT_CEILING_DIR=Optional.empty

2022-12-22/18:07:07.627 com.sourceclear.util.io.GitUtils DEBUG SRCCLR_GIT_CEILING_DIR=Optional.empty

2022-12-22/18:07:07.669 com.sourceclear.agent.util.DeveloperCounting DEBUG Git Log 0 entries gathered in 42.0 milliseconds.

Processing results...

2022-12-22/18:07:07.693 com.sourceclear.api.client.SourceClearClient DEBUG Setting up SSL context with provider BCFIPS version 1.000203

2022-12-22/18:07:07.721 com.sourceclear.api.client.SourceClearClient DEBUG HTTPS connection is restricted to accept only FIPS-140-2-compliant ciphers

2022-12-22/18:07:08.635 com.sourceclear.api.client.SourceClearClient DEBUG Bogus reply to URL=https://api.sourceclear.io/v1/scan status=400 body=<<{"message":"Workspace-level agents are not allowed to override the workspace. Remove workspace option when scanning."}>>%n

java.io.IOException: Server returned HTTP response code: 400 for URL: https://api.sourceclear.io/v1/scan

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)

at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)

at java.base/java.lang.reflect.Constructor.newInstance(Unknown Source)

at java.base/sun.net.www.protocol.http.HttpURLConnection$10.run(Unknown Source)

at java.base/java.security.AccessController.doPrivileged(Native Method)

at java.base/sun.net.www.protocol.http.HttpURLConnection.getChainedException(Unknown Source)

at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)

at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)

at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)

at com.sourceclear.api.client.SourceClearClient.sendJsonifiedItemToURL(SourceClearClient.java:541)

at com.sourceclear.api.client.SourceClearClient.match(SourceClearClient.java:313)

at com.sourceclear.engine.scan.PlatformScan.match(PlatformScan.java:63)

at com.sourceclear.engine.scan.LibraryGraphContainerScanner.match(LibraryGraphContainerScanner.java:204)

at com.sourceclear.agent.services.ScanServiceImpl.buildReport(ScanServiceImpl.java:197)

at com.sourceclear.agent.commands.ScanCommand.lambda$executeRepoScan$5(ScanCommand.java:865)

at com.sourceclear.agent.commands.ScanCommand.handleScanErrors(ScanCommand.java:1037)

at com.sourceclear.agent.commands.ScanCommand.executeRepoScan(ScanCommand.java:854)

at com.sourceclear.agent.commands.ScanCommand.execute(ScanCommand.java:542)

at com.sourceclear.agent.EntryPointImpl.runVerb(EntryPointImpl.java:385)

at com.sourceclear.agent.EntryPointImpl.dispatchVerbOptions(EntryPointImpl.java:334)

at com.sourceclear.agent.EntryPointImpl.apply(EntryPointImpl.java:159)

at com.sourceclear.agent.Main.start(Main.java:117)

at com.sourceclear.agent.Main.main(Main.java:122)

Caused by:

java.io.IOException: Server returned HTTP response code: 400 for URL: https://api.sourceclear.io/v1/scan

at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)

at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)

at java.base/java.net.HttpURLConnection.getResponseCode(Unknown Source)

at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(Unknown Source)

at com.sourceclear.api.client.SourceClearClient.shouldRetryForStatusCode(SourceClearClient.java:732)

at com.sourceclear.api.client.SourceClearClient.sendJsonifiedItemToURL(SourceClearClient.java:529)