The SCE feature currently stores and executes shell scripts in /tmp. Some security benchmarks require /tmp to be non-executable, causing the scan to fail.
A solution would be to add a parameter to the configure.ac to customize the directory used by SCE for storage and execution of scripts.