MWozniczka202322 (Community Member) asked a question.
Is the C7 debug information format not supported on windows?
According to https://help.veracode.com/reader/4EKhlLSMHm5jC8P8j3XccQ/3Lu03OATx74TyUh~WCn8wQ , it wants us to use /Zi, but we have a project that we build using /Z7, since we end up 'merging' the produced .lib into another .lib, and we don't have any way of merging the produced .pdb files (suggestions would be appreciated here).
Do we have to refactor our build process to support veracode?
.png){kind=logo}
Hi @MWozniczka202322 (Community Member) ,
Veracode Static Analysis requires PDB debug symbols for main executables. Veracode strongly recommends that you also provide debug symbols for dependent libraries, when possible, to achieve higher-quality scan results, however this is optional.
/Z7 does not generate the required PDB symbols and is currently not supported.
You can refactor your build process to omit the merging for the build used for Veracode Static Analysis or you may chose to omit the PDB file if this is a dependent library, though this will result in a lower quality scan.
Please also log this as a Veracode Community Idea ( https://community.veracode.com/s/ideas ) to indicate demand to Veracode Product Management.
Please also let me know if you have any remaining questions or concerns.
Thank you,
Boy Baukema