Cybersecurity
DevOps Cloud (ADM)
IT Operations Cloud
Summary
Translation time was increased due to missing import dependencies or poor JS&TS code construction. To resolve and reduce time, unresolved JS/TS imports were excluded from translation with com.fortify.sca.follow.imports property.
Products
Fortify Static Code Analyzer
Environment
Fortify SCA 22.1 version
Situation
SCA JS/TS translations are stuck and taking very long time to complete. It is possible failing with out of memory errors as well.
Possible Errors & Warns:
[ERROR 1105]
There is not enough memory available to complete analysis. For details on making more memory available, please consult the user manual.
java.lang.OutOfMemoryError: GC overhead limit exceeded
[WARN 1003]
Unexpected exception while resolving file **/rules/index.js
java.lang.OutOfMemoryError: GC overhead limit exceeded
[WARN 1395]
File:**/Delete.js.html, Message:Misplaced closing tag "</div>"
Cause
Missing dependencies, poor or unsupported programming languages or poor code syntax, etc.
Resolution
In SCA translation phase, it might be used: -Dcom.fortify.sca.follow.imports=false -Dcom.fortify.sca.DisableJavascriptExtraction=true
Additional Information
Separating source code in translation phases should help narrowing down main issue when multiple programming languages are scanned.
URL Name
KM000010909