SKumar161199 (Community Member) asked a question.
I have added multi tasks for all modules but output comes look like single pom(Single Artifact will be produced ) i required all pom files out put jars?
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Hello @SKumar161199 (Community Member) ,
Yes, with multiple pom files that you are building using maven for example you will have a parent pom most likely to build the application. However, the Veracode Azure DevOps Extension does not build the application unless it is an ASP.NET type and the MSBuild publish command can be used from the Veracode Documentation directly. The customer is responsible for having build steps before the Veracode upload and scan and import flaws build steps for having in their pipeline the building of their application separately. Often, a new(er) customer will not manually build and scan their application first manually to verify the process and we recommend doing this and having an ASC consultation call to assist if needed. The upload and scan task, https://docs.veracode.com/r/t_TFS_config_build_pipe and the Java Packaging Guide, https://docs.veracode.com/r/compilation_java. The recommendation is to do a manual build and upload first, https://docs.veracode.com/r/c_automate_scans
docs.veracode.com
Add Veracode Static Analysis to Azure DevOps Pipelines
You can use the Veracode Azure DevOps Extension to integrate Veracode Static Analysis into your Azure DevOps and Team Foundation Server (TFS) build pipelines. Before You Begin Before adding Veracode analysis to a build pipeline, you must meet these prerequisites: Generated Veracode API credentials. If your credentials ...
docs.veracode.com
Java Application Packaging
Your Java applications must meet specific packaging and compilation requirements before you can submit them for scanning. See Supported Languages and Platforms for instructions for other platforms. You can analyze applications using Veracode Static Analysis or Veracode Software Composition Analysis (SCA) upload and sca...
docs.veracode.com
Automating Analysis with Veracode Integrations
If you are using the Veracode integrations to automate Veracode Static Analysis or Veracode Software Composition Analysis of your applications, you must follow certain guidelines to ensure that your automations run successfully. Any first-party modules you upload for static analysis or third-party components you select...
Best regards,
Steven
Veracode Support Engineer