We onboarded a large number of apps and most didn’t evaluate transitive dependencies. However, if in the web UI I select the app, go to more actions, and choose ‘evaluate a file,’ I can upload the compiled jar for the app and get the full report.
Is there a way to do this via the REST api?
Hello David,
On the Directs and Transitives, what languages are you seeing this behavior? Here is the Scanning documentation discussing the best methods to scan and how to get the Directs and Transitives. Analysis
Your scanning options are CLI Scan, CI Integrations, or the Evaluate binary you mentioned.
I hope this helps.