FBhatti933390 (Community Member) asked a question.
New to resolve Some of the uploaded archive files contained nested archives issue
I'm pusing the build via Azure pipline to Vercode Static scan but unable to select desireable modules, I can see the DLL files in Upload Files section but not in Module Selection section.
I'm would like mention here I'm getting "Some of the uploaded archive files contained nested archives. These nested archives were ignored for the purposes of this scan." warning.
Any help to resolve this issue would be good.
.png){kind=logo}
Hello @FBhatti933390 (Community Member) ,
Veracode does not support nested archives. If they're included in your upload, the scanner will ignore them. This is because there is a type of attack called a zip bomb. You can learn more about zip bombs by following this link: http://www.allhackspro.com/2017/09/destroy-anyones-computer-zip-bomb.html.
We also have this noted in this Help Center article: https://help.veracode.com/r/compilation_java.
Jason
Veracode Support Engineer