EPraveen122170 (Community Member) asked a question.
Veracode static analysis execution failure - Permission denied for jar created in the aws pipeline runner
Hi Team,
We are planning to integrate veracode security analysis to our gitlab CI pipeline and have update the integration code in .gitlab-ci.yml file.
Configs:
- The integration code is added as a further condition once the jar files are compile & created.
- The pipeline code executes in the gitlab runner configured in aws instance
Issue:
- When running the static analysis as part of pipeline scan we are running in the issue as there is a in-sufficient permission for the create jar to run with the scan
Sharing the issue log : Attachment - git_ci_scan_error.log
Workaround or a solution would be of great help
.png){kind=logo}
Hello @EPraveen122170 (Community Member) ,
Thank you for reaching out to the Community.
After reviewing the logs and such. It looks to be that the pipeline scan doesn't have permission to read this file. chomd
and
ls -la
are helpful commands.
You will also get this error if the file doesn't exist.
Kind regards,
Steven
Veracode Support Engineer