Blomgren (Community Member) asked a question.
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Hello @Blomgren (Community Member) ,
It is possible to export SCA results from the platform to a CSV format to open in Excel. Please see the Help Article below with instructions.
Export Agent-Based Scan Results
Jason
Veracode Support Engineer
We do not have agent-based, only upload and scan in the platform and pipeline scans through the ADO integration. The upload and scan page does have a download button, but it redirects me over to the Data Export page that only has the canned-reports (and we don't grant most of our end-users permission to the analytics tab). From that page, the Software Composition Analysis (SCA) Results Export is far too verbose to be actionable.
Hi @Blomgren (Community Member) ,
Can I inquire as to why the users/developers cannot access those Analytics? If they can access the App Profile and Triage Flaws, that would be more important and would suggest looking at the Roles and Teams Help Center Article, Understanding Veracode SCA Roles.
If you are concerned with access, I would suggest integrating and outputting results to your own issue tracking system. That way the results would be easily accessible to those users/developers.
One other questions, is there a particular reason that you want the analytic reports exported to Excel?
Jason
Veracode Support Engineer
The team is aware of the integrations with tracking systems but would like more control over what goes into it. For example, if they have 10 findings all pertaining to a single server setting, then those could be rolled into a single ticket and sent to the server team. They want to prevent ticket overload and also focus on the findings that are most important to fix first.
We have custom dashboards we (security team) use for leadership reporting within the analytics tools and as we have hundreds maybe thousands of developers in our company, so did not want to risk someone removing/editing these by accident. Maybe that is something we need to revisit.
I did just try enabling the Security Insights role for one of our developers to see if that would grant him access to the SCA reports, but while it did grant him access to the Analytics tab, the Data Exports option that has those canned reports was not even displayed in his drop down menu.
I told him we could look into creating a custom dashboard from which his team's SCA results could be exported, but it seems that even in the Explore Your Data section, the results are limited to Agent-Based SCA, and does not give access to any Upload and Scan SCA results.
@Blomgren (Community Member) ,
Thank you for that detailed response! For something as in-depth as this, I would recommend reaching out to your Customer Success Manager (CSM) who can work on what you what to achieve and I can also suggest discussing your needs with a Security Architect team as well regarding those custom integrations.
Jason
Veracode Support Engineer