diff --git a/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/ScaScanner.java b/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/ScaScanner.java index 5668dda0d..bb82d1f92 100644 --- a/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/ScaScanner.java +++ b/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/ScaScanner.java @@ -26,6 +26,7 @@ public class ScaScanner { private static final String ALGORITHM = "SHA-1"; private static final String JAR = ".jar"; private static volatile HashSet scannedClassSet = new HashSet(); + private static volatile HashSet scaSet = new HashSet(); private static volatile Boolean isClassPath = false; private static boolean isJarLibs(String packageFile) { @@ -58,11 +59,11 @@ public static void scanForSCA(String packageFile, String internalClassName) { } else if (isWarLibs(packageFile) && !scannedClassSet.contains(packagePath)) { scannedClassSet.add(packagePath); thread = new ScaScanThread(packagePath, 1); - } else if (!scannedClassSet.contains(packageFile) && isLocalMavenRepo(packageFile)) { - scannedClassSet.add(packageFile); + } else if (!scaSet.contains(packageFile) && isLocalMavenRepo(packageFile)) { + scaSet.add(packageFile); thread = new ScaScanThread(packageFile, 3); - } else if (packageFile.endsWith(".jar") && !scannedClassSet.contains(packageFile)) { - scannedClassSet.add(packageFile); + } else if (packageFile.endsWith(".jar") && !scaSet.contains(packageFile)) { + scaSet.add(packageFile); thread = new ScaScanThread(packageFile, 3); } if (!isClassPath) {