DJans368729 (Community Member) asked a question.
Scan of an one EAR file with one WAR file. Veracode is alos scanning a JAR files that is included through MAVEN ( lib directory ) while we just want NEXUS-IQ doing this job.
Some thing weird. Basic and simple application. One EAR and one WAR file. We add third party libraries through MAVEN in the lib directory of the WAR ( pretty standard ). When we send the EAR file for scanning, the third party ( an IBM one ... Not scanning the 2 log4J files ) is also scanned !???
.png){kind=logo}
Hello @DJans368729 (Community Member) ,
Thank you for reaching out to the Community.
With this issue you are reporting, it would be best that you schedule a consultation.
Kind regards,
Steven
Veracode Support Engineer