Open Source Analysis (software composition analysis) issues display in a view within Code Sight.

The view that displays depends on which IDE you are running:

  • In Eclipse and Visual Studio, the list of issues appears in the Code Analysis view, as in previous versions of Code Sight.
  • In JetBrains IDEs, including IntelliJ, and in VS Code, the list of issues appears in Local View.
Figure 1. List of SCA issues in Local View in IntelliJ

Open Source Analysis issues in IntelliJ
Figure 2. SCA issues in LOCAL VIEW in VS Code

LOCAL VIEW: VS Code display of SCA issues

In Eclipse, IntelliJ, or Visual Studio:

  • Click the SCAN icon or label to launch an Open Source scan.
  • While a scan is running, the SCAN icon changes to a red square, and a progress wheel displays. You can click the red icon to cancel the scan.

In VS Code:

  • Click the SCAN icon to launch a scan of the type you chose.
  • While a scan is running, the SCAN icon changes to an icon with an X. You can click the X icon to cancel the scan.

The Issues list

Lists issues that Code Sight has found.

In most supported development environments (but not in VS Code), the list of issues is organized into the following columns:

Severity
Icons in this column indicate the severity level of the issue:

 Low

 Medium

 High

 Critical

Component
The name of the source file where the issue was detected.
Location
The name of the project file where the issue was found.
First Detected
Indicates how long ago the issue was first detected.

Issue Details

Code Sight displays issue details when you click to highlight an issue in the Issues list. The Issue Details panel also gives you access to a dependency-tree view titled Contributing Details.

Please see Issue details: Black Duck SCA and View dependencies: Black Duck SCA.