CLuksza632491 (Community Member) asked a question.

Why one of my dependency is not showing up in SCA section?
I have dependency spring-addons-starter-oidc from com.c4-soft.springaddons.
I use maven and in pom.xml this dependency looks just like any other.
Why is it not visible?

I build my microservices into separate jar files then zip all together

 

I promoted the scan. Flaws are still visible on "Triage flaws" page instead of SCA page. From some reason it detects this library like it is my code.

 

 

Maven configuration:

<springaddons.version>7.1.8</springaddons.version>

 

<dependency>

<groupId>com.c4-soft.springaddons</groupId>

<artifactId>spring-addons-starter-oidc</artifactId>

<version>${springaddons.version}</version>

</dependency>

 


  • Hi @CLuksza632491 (Community Member)​ ,

     

    I would recommend you contact our technical support team. Here's how you can log a case:

    1. Navigate to the upper right corner of any page in the Community, click on your user avatar.

    2. Select Contact Support from the drop-down menu.

     

    Thank you,

    Boy Baukema

    Expand Post

Topics (2)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.