Scan behaviour matrix

The scanner works using a plugin architecture, so each scanner plugin have different capabilities and requirements. However, there are conditions that need to be met in order to any scanner plugin to work correctly.

Considering the following condition:

Condition	Explanation
Language	The language implemented by the plugin
Build Tool	The build tool used in the codebase
Valid build required?	Do we need the build to execute and complete successfully?
Tool required?	Do we need to execute the build tool installed?
Invalid dependency?	What happens if the project includes an invalid/unreachable dependency?

These are the level of support provided and the corresponding behaviour of the scanner

Language	Build Tool	Valid build required?	Tool required?	Invalid dependency?
C/C++	conan	No (with lockfile)	No	Complete
Clojure	lein	No	Yes	Complete
Clojure	clojure	No	Yes	Complete
Dart/Flutter	dart	No (with lockfile)	No (with lockfile)	Complete
Elixir	mix	No (with lockfile)	No (with lockfile)	Complete
Golang	go	Yes	Yes	Failure
Java	gradle	Yes	Yes	Complete
Java	mvn	Yes	Yes	Complete
Java	ant (+ivy)	No	No	Complete
Scala	sbt	Yes	Yes	Failure
.NET	dotnet	Yes	Yes	Complete
.NET	paket	No	No (with lockfile)	Complete
NodeJS	npm	No (with lockfile)	No (with lockfile)	Complete
NodeJS	pnpm	No (with lockfile)	No (with lockfile)	Complete
NodeJS	yarn	No (with lockfile)	No (with lockfile)	Complete
Perl	carton	No (with lockfile)	No (with lockfile)	Complete
PHP	composer	No (with lockfile)	No (with lockfile)	Complete
Python	pipenv	No (with lockfile)	No (with lockfile)	Complete
Python	poetry	No (with lockfile)	No (with lockfile)	Complete
Python	requirements	No	Yes	Complete
R	R	No (with lockfile)	No (with lockfile)	Complete
Ruby	bundle	Yes	Yes	Complete
Rust	cargo	No (with lockfile)	No (with lockfile)	Complete
Swift / Objective-C	cocoapods	No (with lockfile)	Yes	Failure
Swift / Objective-C	SwiftPm	No (with lockfile)	No (with lockfile)	Failure
VanillaJS	none	No	No	Complete