Merge pull request #231 from Nizernizer/bug/issue-191

close issue #191
HXSecurity · Feb 7, 2022 · 9ac122b · 9ac122b
2 parents ec3c556 + 4b05d48
commit 9ac122b
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/ScaScanner.java b/iast-core/src/main/java/com/secnium/iast/core/enhance/sca/ScaScanner.java
@@ -26,6 +26,7 @@ public class ScaScanner {
     private static final String ALGORITHM = "SHA-1";
     private static final String JAR = ".jar";
     private static volatile HashSet<String> scannedClassSet = new HashSet<String>();
+    private static volatile HashSet<String> scaSet = new HashSet<String>();
     private static volatile Boolean isClassPath = false;
 
     private static boolean isJarLibs(String packageFile) {
@@ -58,11 +59,11 @@ public static void scanForSCA(String packageFile, String internalClassName) {
         } else if (isWarLibs(packageFile) && !scannedClassSet.contains(packagePath)) {
             scannedClassSet.add(packagePath);
             thread = new ScaScanThread(packagePath, 1);
-        } else if (!scannedClassSet.contains(packageFile) && isLocalMavenRepo(packageFile)) {
-            scannedClassSet.add(packageFile);
+        } else if (!scaSet.contains(packageFile) && isLocalMavenRepo(packageFile)) {
+            scaSet.add(packageFile);
             thread = new ScaScanThread(packageFile, 3);
-        } else if (packageFile.endsWith(".jar") && !scannedClassSet.contains(packageFile)) {
-            scannedClassSet.add(packageFile);
+        } else if (packageFile.endsWith(".jar") && !scaSet.contains(packageFile)) {
+            scaSet.add(packageFile);
             thread = new ScaScanThread(packageFile, 3);
         }
         if (!isClassPath) {