ahmgdevo (Community Member) asked a question.
we are changing current policy and I want to know if there is any ability to compare the scan results between the old policy and the new policy. We have changed the severity on several flaws and want to be able to notify the impacted development teams.
we are changing current policy and I want to know if there is any ability to compare the scan results between the old policy and the new policy. We have changed the severity on several flaws and want to be able to notify the impacted development teams.
I don't see any available reporting that would do this compare.
Any thoughts on how get a compare done?
.png){kind=logo}
Hi @ahmgdevo (Community Member) - thank you for your patience! Here is the feedback from our support team:
Policy edits will trickle down to the most recent scan/s. So if you had done a Dynamic, and Static in the past before changing the Policy. The most recent versions of those scans will reflect your changes and scans going forward. However, any scans done prior will still retain the old policy so the results will still be what you remember on those. To compare scan results, you can pull the results from the most recent after editing policy, and the second to last scan which is still under the old policy before the edits.
Let us know if this helps. I'm copying @Matthew, Customer Support (Veracode) and @Steven D., Veracode Support (Veracode) in case you have any follow-up questions 🙂