SSchuenemann194173 (Community Member) asked a question.
How to handle large Frontend Projects that use non-supported Javascript
Hi,
it seems that there many frontend-frameworks like VueJS, Angular etc. are only supported by Veracode SAST but not by Greenlight.
But SAST does take quite a while for larger projects, so it does not seem viable to have developers (or the CI System) perform SAST scans regularily (as in on every commit).
Is there a roadmap when those frameworks will also be supported by Greenlight?
Would it make sense to run Greenlight over changed parts in the minified javascript code?
.png){kind=logo}
Hi @SSchuenemann194173 (Community Member) , thank you for your question! I found a similar topic discussed in the Community a while back. Check out this thread where@Glico Man (Community Member) and @TMitchell313756 (Community Member) shared great insights. Let us know if that helps!
Thanks for the answer. But the plugin mentioned in the thread seems to also use greenlight.
And as far as I can see, greenlight does only support plain javascript and a limited variety of embedded javascript. Therefore greenlight seems to be unusable for modern frontend projects based on frameworks like angular or vue.js
So unless I am missing something I am either forced to rely on "normal" static code analysis (which takes very long) or scan the minified javascript code (which makes debugging of issues very difficult due to missing link to the source code)
My bad, it seems as if Greenlight correctly configured CAN analyse Typescript. But embedded Javascript (like the .vue files for vue.js) are still a problem tho
Hi @SSchuenemann194173 (Community Member) - thank you for getting back to me! You're right, Greenlight does not support Vue files yet while Static Analysis does. I encourage you to submit the request to our Ideas portal where other customers can add weight to the request that helps the Veracode Product team gauge the demand and prioritize the roadmap. Looking forward to seeing your Idea💡