I scanned the same code base with SCA 4.0 and SCA 4.40 but the number of files scan count differed. The scanned file count was 10 more for SCA 4.0 than SCA 4.40. Can anyone please explain why?
In SCA 4.00, there are a bunch of Java libraries in Core/default_jars. The libraries in there resolve the references in your JSPs that have to do with getting values from outside your application. The simple solution is to copy the default_jars from 4.00 to 4.42 and then run it again.