VVartak503484 (Community Member) asked a question.
For using the Veracode SCA Plugin for VS Code how can I create an account such that the API credentials and srcclr token generated by the account can be used by multiple users?
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
hello @VVartak503484
You can generate an agent and save the token generated, or you can enter on your machine > home user dir (Windows C:\\users\<your_user> or Linux /home/<your_user>) and search for the directory call .srcclr
Inside of that directory, there is a yml file called agent that describes the profile, agent token and configuration for your SCA scan. So basically, you can user the same configuration file.
But I think this is not a best practice. Each user can generate a personal agent inside of MyWorkspace to use SCA scans
Hi @VVartak503484 (Community Member) ,
Release v0.70.0 of SCA Scan in VS Code auto-installs and configures the Agent to your machine. This approach does not allow multiple users to use the same token on different machines. If you try to run the scan on multiple machines using the same token, you'll receive an error message.
As mentioned by lucas.ferreira, having multiple users on the same token is not best practice. We recommend separate credentials and Agents for each user in your Organization. If this is something you'd like as a feature enhancement, please submit an idea to Product Management through this link.
Thank you,
Jen
Managing multiple users is not feabile so having a single user whos API credentials can be used would be feasible to manage and monitor, was the idea.
So if API credentials are shared, the agent can be automatically downloaded as mentioned by you. Once this is done the user will be able to run the scan is it so?