Product Announcements — Hannah (Veracode PM) (Community Member) asked a question.
The Veracode Analytics team has been hard at work to bring application-linked SCA Agent-based findings to the Findings Explore. We will be providing the same level of detail for SCA Agent issues in the Findings Explore as we do for other SAST, DAST, and Upload and Scan SCA findings at this time. For more in depth details on these issues, please continue to refer to the SCA Agent-based Issues Explore.
This addition will be retroactive, adding all SCA Agent-based issue data to the Explore. You will be able to filter for these findings specifically using the new boolean field “SCA Agent-based Issue (Yes / No)”.
You can expect this data and new field to be available in Veracode Analytics starting April 3rd, 2023.
.png){kind=logo}
The “SCA Agent-based Issue (Yes / No)” field is now live in Veracode Analytics! You may now use this flag to filter for either SCA Upload and Scan findings or application linked SCA Agent-based scan findings.
If you link SCA Agent-based scans to applications but would like to keep things as is, you can simply exclude those findings by creating a filter on “SCA Agent-based Issue (Yes / No)” and set it to No.
If you would prefer to see SCA Agent-based findings and not SCA Upload and Scan findings, you can create a custom filter as follows: ${fact_findings.sca_agent_issue} = yes OR ${fact_findings.scan_type} = "Static Analysis" OR ${fact_findings.scan_type} = "Dynamic Analysis"
We will be delaying the release of application-linked SCA Agent-based findings to the Findings Explore to April 10th to allow customers additional time to apply appropriate filters to their dashboards and looks. Thank you for your patience!