How about scanning only modified files in the codebase using FNCI.
Scenerio:
If there are total of 400 files present for a component. Out of that 400 only 12 files have been modified recently, if the FNCI scan is performed only on that 12 files is enough or we need to perform a scan on complete code base.
Code Insight by default only scans changed files upon re-scan. For instance if you have setup a project which syncs code from Git, P4 or TFS, upon rescan only the files that are changed are scanned and not every file.
Here, i am not talking about re-scan scenario. Lets say For the 1st release we run scan on the completed code base of 400 files and found some evidence. In the next release while we are running the scanning, can we perform FNCI scan only for the changed/modified files is enough Or we need to run on the complete code base for every release?
For release over release, if you wish to retain the inventory, our current suggestion would be to export the inventory into a new project (named by the version) and scan again.
We are working on how to make this seamless in future releases.
