⚠️ Announcement: this group will be archived at the end of the week.
We wanted to give you a heads-up that we’re archiving this user group at the end of this week, to help centralize discussions in the IDE Scan (Greenlight) topical forum where you can continue to ask questions, exchange ideas, learn and share best practices, and get updates from the Veracode team.
🔔To stay on top of new discussions about IDE Scan, follow
#IDE Scan (Greenlight) and enable email notifications.
Static Analysis Group (Archived) — Jon J (Veracode Product Manager) (Veracode)
Hi everyone - today we have announced an exciting addition coming to the static analysis product family, a new capability we're calling the Pipeline Scan.
This is a speed-focused analysis method that helps you incorporate static analysis more easily into your development pipelines. Most scans running in the pipeline scan complete in 1-2 minutes, with the same set of results seen when performing an analysis using a Policy Scan or Sandbox.
The pipeline scan will be ready for users in mid-March and we will be sharing many more details then. In the meantime please let me know if you've got any questions here.
Thanks!
RSingh170005 (Community Member)
I've integrated veracode greenlight with Android studio but while running veracode scan I am getting below error, even my code is successfully compiled, R.java is successfully generated in intermediated directory .
Error:(6, 28) java: cannot find symbol
symbol: class R
location: package net.abc.def
import net.abc.def.R; => this line is giving above error.
Any help will be appreciated.
Thanks in advance,
Hi @RSingh170005 (Community Member)
Can you take a look at this stack overflow article and let us know if it helps.
https://stackoverflow.com/questions/33826801/cannot-find-symbol-r-error-after-renaming-package-name
Regards
Andy
PBannister179056 (Community Member) asked a question.
Hello @PBannister179056 (Community Member) - The process for requesting an application be considered for the Veracode Verified program is by submitting the Verified Request form located under the "Verified" option in the top navigation, first option "Application form". As @DeCaPa (Community Member) mentioned, the form assumes that the full application is scanned under a single application profile. We will be making updates to this format to accommodate when a single "commercial-version" of an application is scanned across multiple application profiles. Until that update is available, my recommendation is to use the free text field at the bottom of the form to include all the application profiles which the components of this single application is currently scanned. Does this help answer your question?
MPeitz503616 (Community Member) asked a question.
I am not seeing results when I scan a vb file.
Hi @MPeitz503616 (Community Member) - Greenlight supports VB.net in Visual Studio. Is this the IDE you're using?
P.S. Here is a full list of Supported IDEs and Languages for Greenlight.
Community Announcements — NKesavan719446 (Community Member) asked a question.
Kindly submit the support ticket by sending email to support@veracode.com with the Organization name.
MDoherty666534 (Community Member) asked a question.
Hi @MDoherty666534 (Community Member) - Thank you for your question! I just checked with @jworthington (Veracode, Inc.) (our Product Manager for Greenlight) -- the Python support for Greenlight is something we're planning but do not have a timeline yet unfortunately.
To help drive the priority, as a customer, you have the privilege to submit a request on the Ideas platform -- where other customers can add weight to the request that helps Product team in prioritizing the roadmap. For details around the submission and review process, you can check out this knowledge article. Let me know if you have any additional question.
sMannem108028 (Community Member) asked a question.
When I tried to scan one of our java class in Maven project, we got the below error in eclipse pop up window-
"Please clean and rebuild the project with eclipse. If you are using third-party build tool, you must disable it and build the project with the default Eclipse Java builder"
Hi @sMannem108028 (Community Member) - thanks for your patience! I've checked with our Support team and here is the feedback: Veracode Greenlight for Eclipse only supports Eclipse binaries, which means you may experience problems when scanning projects built with third-party build automation tools such as Maven or Gradle.
If you are compiling with Maven or Gradle, Veracode recommends that you use the Eclipse plugin for that build tool to import your files. After you import the project into Eclipse using the Maven or Gradle plugin, if you are still experiencing issues scanning your Eclipse project with Veracode Greenlight, try the following actions:
• Gradle: If you compiled your files using Gradle, you must be using the java plugin. For example, the build.gradle file must contain apply plugin: 'java'.
• Maven: If you compiled your files using Maven and then imported these files, the .project file should contain the java and maven natures. You can manually add them to the .project file as follows:
<buildCommand>
<name>org.eclipse.jdt.core.javabuilder</name>
<arguments>
</arguments>
</buildCommand>
<buildCommand>
<name>org.eclipse.m2e.core.maven2Builder</name>
<arguments>
</arguments>
</buildCommand>
</buildSpec>
<natures>
<nature>org.eclipse.jdt.core.javanature</nature>
<nature>org.eclipse.m2e.core.maven2Nature</nature>
</natures>
Note: Any project must build successfully outside of Eclipse. If you have problems such as classpath or buildpath errors, for example, Eclipse cannot build the files needed to submit a scan to Veracode Greenlight.
Hope this helps!
.png){kind=logo}
