SSadullah041929 (Community Member) asked a question.
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
As far as I know, there is no detailed control over email notifications sent from the platform. It will send you notifications at the end of all scans, but those notifications do not include any information about the results of the scan, nor can you have them only sent when new issues are found. You may want to check the "Ideas" section of the Community for any existing suggestions, and if there are none, create one.
(I was just trying to check all the available settings to refresh my memory, but I'm having trouble getting into the Veracode platform at the moment.)
You can use other integration methods (APIs, Jira integrations, etc) to examine scan results and generate notifications, however this may take a bit of work.
Got back in -- you can adjust some settings, and there is a setting on the profile page about notifications for new flaws that violate policy, but nothing for Sandboxes:
"I Wish to receive email notifications when a newly identified vulnerability or change in the severity causes my application to violate policy"
So if you always scan for policy, that might meet your requirements.
"profile page" -> is the "Your account" page under menu at the top right (third from left for me, with either the company or your name on it).
If you use JIRA, you might consider automating the ticket generation process. It improves visibility and ensures follow through on cleaning up flaws.