CAST HIGHLIGHT - CLI - Python - Dependency libraries are not counted

Highlight scanner found all the code but did not count the dependency libraries. Python backend used has several dependencies. The dependencies are referenced in package-lock.json

 

Details

By default, only level 0 of dependencies is extracted (direct component references in package.json, package-lock.json).

Use this while scanning --includeAllDependencies (optional) Will bypass the automatic filtering of indirect dependencies found in node_modules. Please refer Highlight Automated Code Scan (Command Line)

Also use the latest CLI

 

Related Articles

CAST HIGHLIGHT - SCA - Python - Dependencies are not getting detected

CAST HIGHLIGHT - CLI - Files Supported for Dependency Discovery in Python

CAST HIGHLIGHT - On Premise - Analysis - Python - Libraries that are referred in Config files (Requirement.txt) are not scanned by Highlight

 

Additional Resources

CAST Highlight Troubleshooting Guides

CAST Highlight Product Documentation

 

 

Ticket

50387

 

Have more questions? Submit a request

Comments

Powered by Zendesk