In Local View, when Auto / Automatic is the active scan mode, Code Sight launches a scan for an individual file whenever you open or save that file.
An automatic scan can run one of the following tools:
-
Rapid Scan Static
The Rapid Scan Static engine (also known as Sigma) must have been installed on your system. Rapid Scan Static is available if you have authenticated Coverity, Polaris, or the Code Sight Standard Edition.
-
Snippet Analysis (available only in VS Code)
Auto-scan can also run Snippet Analysis. You must first have enabled Snippet Analysis: See Snippet Analysis.
In VS Code, after running an Automatic Scan the results in LOCAL VIEW are grouped into the categories of Secrets, Vulnerabilities, and Licenses. All static-scan (SAST) issues related to hardcoded secrets in the code base are grouped under Secrets. Other static-scan issues are grouped under Vulnerabilities. The Licenses category lists Source Code Analysis (SCA) issues.