Old code issues detected as new code

[ganncamp (G Ann Campbell)]

Hi,

@jgarrido

This makes me wonder if an existing issue is defined as new every time the file is modified, no matter the rule.

No.

Going back to the example in your first post,

@jgarrido

And this is an example of issue defined as new code when is actually old (white background)

This could be an example of this:

@ganncamp

Another case where new issues can show up on old code is when your analysis configuration changes. Let’s say your analysis configuration changed so that dependencies that were previously unavailable to analysis are now included. Those newly-provided dependencies give a deeper understanding of the code, which allows previously overlooked issues to be newly raised.

Another explanation for this is that analysis doesn’t have the SCM metadata it needs to correctly understand what’s new and what’s not.

We would need your analysis log to understand.

The analysis / scanner log is what’s output from the analysis command. Hopefully, the log you provide - redacted as necessary - will include that command as well.

This guide will help you find them.

 
Ann