From 26e6e1c032541a0c7d8bd1df089835090f6f0bee Mon Sep 17 00:00:00 2001
From: Assaf Attias <49212512+attiasas@users.noreply.github.com>
Date: Tue, 9 Jul 2024 10:37:54 +0300
Subject: [PATCH] Don't show applicable status if not covered (#478)

---
 src/main/scanLogic/scanRunners/applicabilityScan.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/main/scanLogic/scanRunners/applicabilityScan.ts b/src/main/scanLogic/scanRunners/applicabilityScan.ts
index 36580a51..e31686dc 100644
--- a/src/main/scanLogic/scanRunners/applicabilityScan.ts
+++ b/src/main/scanLogic/scanRunners/applicabilityScan.ts
@@ -305,10 +305,13 @@ export class ApplicabilityRunner extends JasRunner {
                         let fileIssues: FileIssues = this.getOrCreateFileIssues(applicableDetails, location.physicalLocation.artifactLocation.uri);
                         fileIssues.locations.push(location.physicalLocation.region);
                     });
+                    scanned.add(this.getCveFromRuleId(analyzeIssue.ruleId));
                 } else if (analyzeIssue.kind === 'pass') {
                     nonapplicable.push(this.getCveFromRuleId(analyzeIssue.ruleId));
+                    scanned.add(this.getCveFromRuleId(analyzeIssue.ruleId));
+                } else {
+                    this._logManager.logMessage(`${this.getCveFromRuleId(analyzeIssue.ruleId)} is not covered by contextual analysis scan`, 'DEBUG');
                 }
-                scanned.add(this.getCveFromRuleId(analyzeIssue.ruleId));
             });
         }
         // Convert data to a response