hello.

I am integrating jenkins with VeraCode, and the tooling is HORRIBLE.

Highlights:

1. issue #1 no proper reporting support on jenkins end. just send upload and scan, no report visualization (or I did not find, or it is planned, but not to be found)
2. issue #2 wrapper call of the same report returns different results in different formats
3. issue #3 wrapper call for GetAppList USED to send bad CSV (before 2022/09/01), seems to be fixed

issue #1:

the plugin: allows to send the application data to the service, but with very limited customization, so you cannot add bu, tags, etc.

issue #2

I need to control veracode via API, using the java wrapper.

I am calling these actions:

1. UploadAndScan
2. GetAppList (to extract appid)
3. GetSandBox (to extract sandboxid)
4. GetBuildList (to extract app's sandbox's buildid)
5. DetailedReport (to get the build's detailed report)
6. PromoteSandbox (to promote the sandbox to policy)

The main issue is:

if I am trying to pull DetailedReport or SummaryReport,

format CSV is only showing the total # of issues correctly.

format XML has correct data.

issue #3

up to the start of September the GetAppList would return CSV with 2 columns as headers, but 3 columns of data. This is non-valid csv.

for more details, I need somebody from veracode.

Please ping me.