eric (Community Member) asked a question.

May 1, 2021 at 9:00 AM
Veracode Detailed Report doesn't include SCA details

The Veracode Detailed Report doesn't include SCA details – it's misleading because it doesn't have all the details we need. This may have the effect that our teams don't remediate SCA issues because they may be missing the details – if the report is used as a base in tickets or to claim that the remediation work is completed.

We also don't want to have to explain to everybody that they need to use Custom reports and choose checkboxes, etc. The Detailed report should be..... detailed!

  • 5 answers
  • 677 views
cosval and Prem like this.

  • Prem (Community Member)

    I agree with this detailed report should be detailed and it should include SCA details as well.

    • marcboggs (Community Member)

      I use the findings API to get SCA results. Append "?scan_type=SCA" to the call to only retrieve SCA results. Additionally, you can call the SBOM api to get SCA results.

      • BCanaday114931 (Community Member)

        ok that's what I was thinking about using in order to react appropriately to the SCA findings within our automation, but for displaying the SCA findings on the same detailed report I guess there is currently no option..

         

        I see Eric's idea is still sitting in the "New" stage after a year of being on the first page if most upvoted suggestions

        Expand Post

Topics (2)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.