You can use Greenlight for Eclipse with Apache Tomcat to scan JSP files. You enable the Tomcat application server to parse and compile the Java embedded in the JSP and create a class file for Greenlight to submit for scanning.
Before You Begin
You meet the Greenlight prerequisites.
Configure the local Tomcat server and deploy the project to that server.
Make an HTTP request to that Tomcat server for each JSP resource you want to scan.