SJain212272 (Community Member) asked a question.

August 11, 2020 at 8:12 AM
My veracode static analysis is taking an hour to complete. there is a requirement to analyse and reduce the scan timelines in order to complete it within 10-15 mins

My veracode static analysis is taking an hour to complete. there is a requirement to analyse and reduce the scan timelines in order to complete it within 10-15 mins.

 

Any inputs to reduce the scan time would be appreciated

  • 3 answers
  • 2.53K views

  • Boy, Security Consultant (Veracode)

    Hi @SJain212272 (Community Member)​ ,

     

    In general, to reduce the time that Veracode Static Analysis takes to analyze an application it's best to ensure that you reduce as much as possible that which you provide for analysis. Here are some common things for consideration:

     

     

    If you are introducing Veracode Static Analysis in the CI/CD pipeline I would also highly recommend looking into Pipeline Scans, you can find more information here: https://help.veracode.com/reader/tS9CaFwL4_lbIEWWomsJoA/ovfZGgu96UINQxIuTqRDwg .

     

    It may not always be possible to reduce scan time and preserve a meaningful result. You may need to consider changing your scanning strategy to scan nightly scan if this is not possible.

     

    I would recommend you schedule a consultation call to discuss any questions on this.

    You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.

     

    Thank you,

    Boy Baukema

    Expand Post
    Selected as Best

  • Boy, Security Consultant (Veracode)

    Hi @SJain212272 (Community Member)​ ,

     

    In general, to reduce the time that Veracode Static Analysis takes to analyze an application it's best to ensure that you reduce as much as possible that which you provide for analysis. Here are some common things for consideration:

     

     

    If you are introducing Veracode Static Analysis in the CI/CD pipeline I would also highly recommend looking into Pipeline Scans, you can find more information here: https://help.veracode.com/reader/tS9CaFwL4_lbIEWWomsJoA/ovfZGgu96UINQxIuTqRDwg .

     

    It may not always be possible to reduce scan time and preserve a meaningful result. You may need to consider changing your scanning strategy to scan nightly scan if this is not possible.

     

    I would recommend you schedule a consultation call to discuss any questions on this.

    You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.

     

    Thank you,

    Boy Baukema

    Expand Post
    Selected as Best

    • SJain212272 (Community Member)

      Hi Boy,

      Thank you so much for your valuable suggestions. We tried the pipeline scan in our CI process, however we got the error because of size limitation of 105 mb.

      Is there a way to fix this issue ?


      Logs:
      Expand Post

      • Boy, Security Consultant (Veracode)

        Hi @SJain212272 (Community Member)​ ,

         

        If the binary size of your application is greater than 105Mb, then it is unlikely that Veracode Static Analysis or Pipeline Scan will be able to complete within 10 minutes.

        I would recommend investigating reducing the size of what you are scanning with Veracode or switching to a lower frequency of scanning.

         

        I would recommend you schedule a consultation call to discuss any questions on this.

        You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.

         

        Thank you,

        Boy Baukema

        Expand Post

Topics (2)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.