NM257998 (Community Member) asked a question.
SCA Scan switches between .NET and .NET, JavaScript on the same project.
Same project (.NET and Vue) is considered by SCA scan engine as .NET only and picks up only 68 libraries (all .NET ). Sometimes it picks up all (around 850) including node packages.
So without checking the libraries count, we cannot take into account the risk score.
.png){kind=logo}
Hello user, I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Please open a support case and provide a detailed explanation of your query to facilitate better assistance from our engineers.
Regards,
Hariprasad
Veracode support
hello @NM257998 (Community Member)
I suppose that you are using sca agent-based right? If yes, when you start scan
the scanner pick up csproj and package, package-lock, yarn-lock files? Would be the best split the scope of test into back-end and front-end because you'll manage better into Veracode platform.
Please provide more details and I can help you