EPraveen122170 (Community Member) asked a question.
Veracode static analysis in gitlab pipeline unable to scan jar with size more than 200 MB
We have integrated Veracode to our gitlab pipeline, Our product comprises of jar compiled for specific module and each jar is more than 200mb in size.
When we tried executing the same through pipeline, we are running into the issue "PIPELINE-SCAN ERROR: CREATE FAILURE: HTTP Response 400: The upload binary 213391468 is too large. Max upload limit is"
Is there a workaround or configuration change to achieve the pipeline scan for jar file size more than 200mb
Thanks in Advance
.png){kind=logo}
Hello @EPraveen122170 (Community Member) ,
You are correct the Pipeline scan does not exceed the total size of 200 MB. As outlined in the link below.
https://docs.veracode.com/r/About_Pipeline_Scan_Prerequisites
I would suggest you dived the files into segments. You can follow this process from the help center. I have included the link below.
https://docs.veracode.com/r/Dividing_Files_into_Segments_for_a_Pipeline_Scan
Best regards,
Steven
Veracode Support Engineer
Hi @Steven D., Veracode Support (Veracode) ,
Thanks for the suggestion.
In our case to perform pipeline scan, We integrate pipeline scan to be executed as a jar(Ref. Below)
Will we be able to add the divided jar to the execution as the "--file" accepts only one argument.
{code}
java -jar pipeline-scan.jar
--veracode_api_id "${VERACODE_API_ID}"
--veracode_api_key "${VERACODE_API_SECRET}"
--file "sample/target/sample.jar"
--fail_on_severity="Very High, High"
--fail_on_cwe="80"
--timeout "${CI_TIMEOUT}"
--project_name "${CI_PROJECT_PATH}"
--project_url "${CI_REPOSITORY_URL}"
--project_ref "${CI_COMMIT_REF_NAME}"
{code}
Suggestion on syntax to be used for multiple split file will also help
Thanks in advance
Hello @EPraveen122170 (Community Member)
The maximum size for Pipeline Scans is 200MB.
If what you have is several different components of an application, you could call pipeline scan for the different pieces. However, each of those pieces would also be limited by the 200MB size limit.
May I suggest you open a Support ticket from the community click on your profile on the right side of your screen and then select Contact Support.
Best Regards,
Steven
Veracode Support Engineer