JMann1966 (Community Member) asked a question.

I have two projects with the same 3rd party JavaScript file. I scanned both projects, one reports flaws in the file the other does not. I would like to understand what can cause this behavior.

I have used Veracode for several years but I am new to the community

I confirmed the file is physically present in both uploaded zips

I confirmed both scans were configured to scan JavaScript files

I confirmed the files are identical and both files contain the code lines flagged as flaws in one of the scans but not the other


VCode likes this.
  • Hi @JMann1966 (Community Member)​ ,

     

    Thank you for reaching out to the Community.

     

    I think we would need to understand the flow in the Static Analysis to dig deeper into this issue.

     

    With that said I would suggest that you please open a ticket with our Support team. You can do this from the Community page and on the Tool bar select "Help" the click on "Contact Support".

     

    I am sure someone will be able to assist you further.

    Best regards,

    @Steven D., Veracode Support (Veracode)​ 

    Expand Post

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.