Don't show applicable status if not covered (#478)

jfrog · Jul 9, 2024 · 26e6e1c · 26e6e1c
1 parent d2acc5a
commit 26e6e1c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/main/scanLogic/scanRunners/applicabilityScan.ts b/src/main/scanLogic/scanRunners/applicabilityScan.ts
@@ -305,10 +305,13 @@ export class ApplicabilityRunner extends JasRunner {
                         let fileIssues: FileIssues = this.getOrCreateFileIssues(applicableDetails, location.physicalLocation.artifactLocation.uri);
                         fileIssues.locations.push(location.physicalLocation.region);
                     });
+                    scanned.add(this.getCveFromRuleId(analyzeIssue.ruleId));
                 } else if (analyzeIssue.kind === 'pass') {
                     nonapplicable.push(this.getCveFromRuleId(analyzeIssue.ruleId));
+                    scanned.add(this.getCveFromRuleId(analyzeIssue.ruleId));
+                } else {
+                    this._logManager.logMessage(`${this.getCveFromRuleId(analyzeIssue.ruleId)} is not covered by contextual analysis scan`, 'DEBUG');
                 }
-                scanned.add(this.getCveFromRuleId(analyzeIssue.ruleId));
             });
         }
         // Convert data to a response