.classpath files included in JEE projects are found not to be taken into account by Highlight for the external dependencies detection.
Also components are not detected by SCA as Java when those dependencies are defined in classpath in build.gradle file.
Details
Check whether the files and folders mentioned in the classpath exist in the source. Then only files from the class path will be read by the scanner and the binary and framework CSVs will get inputs from the referece in the classpath.
For eg: Include the physical Jar files referenced under classpaths in build.gradle file, for those dependency components to be identified by SCA.
References
Automated Dependency Discovery & Supported Package Managers
Additional Resources
CAST Highlight Troubleshooting Guides
CAST Highlight Product Documentation
Tickets
34263, 44527
Comments