i am running fortify sca maven plugin to scan c/c++ codebase that is compiled using maven. a pom file is defined and configured to use maven nar cmake plugin.
when executing the sourceanalyzer -b buildid mvn install, a compilation is triggered and and completes successfully. when i call sourceanalyzer -b buildid --show-files only the pom.xml is shown. it does not appear that any of the cpp files were captured.
does fortify supports maven cmake compilation? what is a workaround to make the sca tool see/files that were captured?