Open eemcmullan opened 6 months ago
This issue is currently awaiting triage.
If contributors determine this is a relevant issue, they will accept it by applying the triage/accepted
label and provide further guidance.
The triage/accepted
label can be added by org members.
This issue has been marked 'good first issue' Please, make sure it aligns with the criteria found here
Hii, can i go with this issue?
@Rupam-It sure! Please reach out if you have any questions.
Hey @eemcmullan I have a small query here, what is the meaning of source-only analysis.
@Rupam-It the analyzer will only scan the source application's code files (no dependencies)
Background: Some of the providers, such as the generic providers (Python, NodeJS), do not support dependency analysis. However, full analysis can still be run for these providers with no output. Instead, we need a way to detect the available provider capabilities from the engine, and then possibly throw a warning to the user, and use source-only analysis.