mshivakumar341901 (Community Member) asked a question.
Getting go project to scan .
Hi i am working on getting go project scanned. I have attached the zip i am trying to scan . I get the error "Description of Issue:
One or more uploaded files has feature or dependency that is not supported by Veracode. Veracode cannot scan this file." Please let me know how to fix the issue. Thanks.
.png){kind=logo}
here is the link to the project since the attachment was removed https://github.com/mayurshivakumar/mockExample . what should our veracode.json look like. i followed the documentation and it did not scan and throws a error as stated above. Thanks for the help.
The error that you are describing typically occurs when uploading an unsupported file type. For Go scans, you should be uploading Go source files (*.go) in an archive. Archives should be in *.zip, *.tar, or *.tar.gz format.
For this project, it requires a veracode.json file to exist in the root of the app directory. It should include the setting "MainRoot": "cmd" because the main executable exists outside the root directory of the app. To see the format of the veracode.json file, please see our help center documentation for Go: https://help.veracode.com/reader/4EKhlLSMHm5jC8P8j3XccQ/395tS2Q0xKOLNRNaqg_Gtg
Additionally, this project uses Go Mod. Veracode supports vendor dependencies. You should run "go mod vendor" from your app directory so that the dependencies are downloaded to the vendor directory.
After ensuring that the veracode.json file is present and that dependencies have been downloaded to the vendor directory, archive the app such that the app directory is the top-level directory in the archive. This is the archive to upload to the Veracode SAST scanner for analysis.