NNalla834049 (Community Member) asked a question.
Is there a java wrapper that returns issues in json format for SAST findings ?
lucas.ferreira likes this.
- lucas.ferreira (M3Corp)
Hello @NNalla834049 (Community Member)
If you want to use the JAVA or C# API Wrapper we don't have this possibility.
But, you can perform the Pipeline Scan and use the parameter --json_display and redirect the output to save within an archive.
You can access this link on Help Center to see more details
Pipeline Scan Command Parameters • Pipeline Scan • Reader (veracode.com)
Expand Post - NNalla834049 (Community Member)
Excellent, thank you so much for the answer. This is exactly what I’m looking for.
- NNalla834049 (Community Member)
I'm able to succesfully run via pipeline but how could those results be persisted on to the saas dashboard currently only results are in jenkins locally and also how to not fail the build when there are issues reported ?
- lucas.ferreira (M3Corp)
@NNalla834049 (Community Member) The pipeline Scan is designed to run on your local machine or on pipeline to give the fast feedbacks about security issues in your applications. Because of this approach, the pipeline scan can run on avarage of 1 minute and 30 seconds, and that is possible because he don't need to create or update the dashboards and reports on Veracode Platform.
To fail or break de build, you can optionally add an parameter to your pipeline scan
--fail_on_severity or --fail_on_cwe.
More information on this link in Help: Pipeline Scan Command Parameters • Pipeline Scan • Reader (veracode.com)
Expand Post
.png){kind=logo}
Hello @NNalla834049 (Community Member)
If you want to use the JAVA or C# API Wrapper we don't have this possibility.
But, you can perform the Pipeline Scan and use the parameter --json_display and redirect the output to save within an archive.
You can access this link on Help Center to see more details
Pipeline Scan Command Parameters • Pipeline Scan • Reader (veracode.com)