Locally detected issues display in Local View.

In JetBrains IDEs and VS Code, Polaris can run SAST scans for local projects.

Figure 1. List of local SAST issues in VS Code

Local SAST issues in VS Code

In JetBrains IDEs and VS Code, Polaris can also run Black Duck SCA scans for local projects.

Figure 2. List of local SCA issues in VS Code

Local SCA issues in VS Code

Scan mode

In IntelliJ (and its JetBrains variants), buttons let you choose the scan mode.

Figure 3. Scan-mode buttons in IntelliJ

Buttons to choose the scan mode in IntelliJ

In VS Code, choose the scan mode by clicking the Mode entry at the top of the LOCAL VIEW, and then using the drop-down menu that appears.

Figure 4. Scan-mode choices in VS Code

Menu to choose the scan mode in VS Code

Use the buttons or the menu to choose between auto-scan or manual scan mode.

Auto
Launches Rapid Scan Static for an individual file whenever you open or save that file.
Manual
Launches scans for individual files or for the entire source project. A manual scan can be a Coverity scan, a Rapid Scan Static (Sigma) scan, a Black Duck SCA scan, or a Black Duck Polaris™ Platform scan, depending on which products have been enabled in Code Sight.

Controls for manual scanning

Click the SCAN icon or label to launch the scan.

In IntelliJ:

  • Click the SCAN icon or label to launch a scan of the type you chose.
  • While a scan is running, the SCAN icon changes to a red square. You can click the red icon to cancel the scan.

In VS Code:

  • Click the SCAN icon to launch a scan of the type you chose.
  • While a scan is running, the SCAN icon changes to an icon with an X. You can click the X icon to cancel the scan.

The Issues list

Lists Code Analysis issues that Polaris has found.

In IntelliJ (but not in VS Code), the list of issues is organized into the following columns (VS Code does display severities):

Severity
Icons in this column indicate the severity level of the issue:

 Audit

 Low

 Medium

 High

 Critical

Issue Type
A brief description of the issue that was found
Location
The name of the file and the line number where the issue was found.
First Detected
Indicates how long ago the issue was first detected.

Issue Details

Code Sight displays issue details when you click to highlight an issue in the Issues list. The Issue Details panel also gives you access to a view titled Contributing Details.

Please see Issue Details: Coverity (SAST), Contributing Details: Coverity (SAST), and Issue Details: Rapid Scan Static.