Static IDE Scan (Greenlight) Group (Archived) — PBannister179056 (Community Member) asked a question.
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Hi @PBannister179056 (Community Member) ,
For questions on Veracode Verified I'd recommend filling out the Verified Program Contact Us form: https://info.veracode.com/contact-us-verified-program.html and a Veracode representative will get back to you.
Thank you,
Boy Baukema
I've asked this question before, as it relates to UI's and Microservices. Where each is in a separate profile. The Verified form only asks for the URL (UI) and no supporting application profiles. It might lead one to believe that only one profile needs to meet the Verified requirement. However after my inquiry, I found that it is necessary for all profiles to meet requirements. It is just that the online form can only support one. So, until that gets corrected, you should reach out to a "Veracode human" that knows Verified to submit your list of application profiles that roll up into a single app.
You mentioned MQTT, cloud, mobile, etc, remember that you can only use Veracode to scan supported languages and URL's (DAST). It supports Android/iOS, many web languages, but not MQTT (afaik). So, anything that doesn't have an associated app profile would not be included.
Hello @PBannister179056 (Community Member) - The process for requesting an application be considered for the Veracode Verified program is by submitting the Verified Request form located under the "Verified" option in the top navigation, first option "Application form". As @DeCaPa (Community Member) mentioned, the form assumes that the full application is scanned under a single application profile. We will be making updates to this format to accommodate when a single "commercial-version" of an application is scanned across multiple application profiles. Until that update is available, my recommendation is to use the free text field at the bottom of the form to include all the application profiles which the components of this single application is currently scanned. Does this help answer your question?