• Hello @svutukuri294468 (Community Member)​ .

     

    Thank you for reaching out to the Community.

     

    To answer your two part question.

    Does Veracode Greenlight plugin scan call reaches Veracode server every time? 

    Yes, Greenlight works by sending the file to an API endpoint for scanning. 

     

    Can the server be overloaded by Greenlight requests, which would in turn cause capacity issues for Policy/Sandbox scans?

    Scans that you start yourself manually take precedence over scans that start automatically. When a scan is currently ongoing, newly saved files are added to a queue in the order that they are saved. A new automatic scan is never initiated while another scan is already running, whether it is an automatic scan or one you started yourself.

     

    The Veracode scan queue shows the priority in which Greenlight scans the files. The queue only shows automatically initiated scans because manually initiated scans always take precedence. The scans in the queue occur 30 seconds apart as long as the files compile successfully. When a file does not compile, a message appears in the log file and the file is not scanned.

     

    If the information we’ve provided you has helped resolve your challenge (or answered your question), we would appreciate it if you could mark the response that was helpful with “Select as Best”. This will help other Community members who come across your question as a similar challenge they might be facing and your best answer will help them find the right solution as well.

     

    Best regards,

    Steven

    Veracode Support Engineer

    Expand Post
    • svutukuri294468 (Community Member)

      Hi @Steven D., Veracode Support (Veracode)​ ,

       

      Thank for the prompt response.

       

      Reg Can the server be overloaded by Greenlight requests, which would in turn cause capacity issues for Policy/Sandbox scans?

       

      I am using Veracode greenlight plugin only to scan single files whether it is Java or Java script. So this IDE plugin scan of a file in development will takes precedence over policy static scan of a product?

       

      Lets say there are 1000's of requests coming from Veracode greenlight plugin in IDE to scan a file. Will this overload the veracode server and cause any affect to policy , static scans of different products under company account?. As policy / static scans are more important than Veracode Greenlight Plugin scans in IDE which we do in development phase.

      Expand Post

Topics (3)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.