Can i just check how could I run sourceanalyzer to scan for a maven project. But when I run the below command it is giving me a lot of “unresolved variable”. However, when I copied to change to -cp "./m2/repository" it is able to resolve them.

Shouldnt be pointing to the class path enough for fortify to run and scan?

sourceanalyzer -b test -cp "./target/**/*.class:./target/**/*.jar" "./src/**/*.java" -exclude "**/test/**/*.java"