On this page (https://help.veracode.com/r/c_enabling_hmac) it talks about enabling HMAC for accessing the API using Java. It notes that I need to download and install the Java authentication library (https://downloads.veracode.com/securityscan/hmac/java/security-apisigning-17.9.0.jar). Then it links to a code example (https://help.veracode.com/r/c_hmac_signing_example) that does NOT reference the authentication library.

There's also a post from this past July (https://community.veracode.com/s/feed/0D53n00007bKWP9CAO) which talks about the example and using it via an API call requiring POST (instead of GET).

So I've gone through all of this and cannot get the example code to work. I can use the command line VeracodeJavaAPI.jar successfully with my credentials to pull data and reports.

Am I missing how the authentication library is needed? The example code doesn't reference any classes in that library.

I've also taken a look at the Java Wrapper classes, but those lack any meaningful documentation.

Does anyone have a working example of how to request an XML summary report in Java? I'm trying to get the high level scan information, parse it, and then post it to a Slack channel.

thanks,

Paul