Expand my Community achievements bar.

SOLVED

How to exclude third-party files from code scanning

Avatar

Level 2

Hello,

 

I am refining the reports generated by AEM in its pipeline (cloud), specifically in the security scan section, and I would like to know how I can exclude third-party files from this analysis.

 

Specifically, I would like to exclude all files from adobe/consulting:acs-aem-commons.

 

Regards!

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

@sgarciad I don't think you can, CM code quality and security pipe main intent is to scan whole code including third party libraries and make aem instance safe, incase if you uncover any critical or blocker level issue from acs commons, you better log issues with acs commons in git and wait for resolution/fix version.

View solution in original post

1 Reply

Avatar

Correct answer by
Community Advisor

@sgarciad I don't think you can, CM code quality and security pipe main intent is to scan whole code including third party libraries and make aem instance safe, incase if you uncover any critical or blocker level issue from acs commons, you better log issues with acs commons in git and wait for resolution/fix version.