PK (Community Member) asked a question.
how to setup a proxy and exclude files in the pipeline scan in Azure DevOps
Hi, I'm trying to configure a pipeline scan in Azure DevOps, but i'm dealing with 2 different problems that can't solve:
I tried using the Upload and Scan task of Veracode, but the task can't connect with the veracode api, because a proxy is needed to go through internet, but i didn't find a way to set up a proxy in the task
As an alternative, i tried to use the pipeline-scan.jar option, which successfully connect to the api when I add the -Dhttps.proxyHost parameter to java.exe instruction, but the scan results include false positives do to 3rd party files. Now, I didn't find a way to exclude files using the pipeline-scan.jar script.
Any idea to deal with one of these issues?
Thanks in advance
.png){kind=logo}
Hello @PK (Community Member) ,
For your alternative method of using the pipeline scan, I would advise looking at the Help Center article below in order to help with the scan.
https://help.veracode.com/r/r_pipeline_scan_commands
If the information we’ve provided you has helped resolve your challenge (or answered your question), we would appreciate it if you could mark the response that was helpful with “Select as Best”. This will help other Community members who come across your question as a similar challenge they might be facing and your best answer will help them find the right solution as well.
Jason
Veracode Support Engineer
@PK (Community Member) I've faced the same issue. The proxy setup is very complicated it would be nice if there was a simpler way to connect to the api.