-
Bug
-
Resolution: Unresolved
-
Minor
I get the following message when trying to scan code on our jenkins server using the plugin mentioned above:
Static Analyzer has determined that you are only scanning third party code. To enable the scanning of third party code, regenerate the IRX file using the --thirdParty option.
ERROR: Failed to run the security scan: Problems occurred generating the IRX file. See /home/ibmadmin/rpcatal/Spark-DK/core/SparkyScan_2018-07-27_15-37-04_logs.zip for details.
Finished: FAILURE
Since this --thirdparty command is to be issued on the command line before the IRX file is generated, I have no way of doing this. There should be an option, like a checkbox or something in the build step for this plugin that allows you to specify whether or not the code is third party so the code scan can run.