Hello, we are trying to integrate the Veracode Static Scan in our GitLab pipelines for an iOS project.

We created the needed zipped archive with dSYMs, IR and product/library/framework parts included.

When uploading the zipped package manually, we are able to scan and get the results.

The issue is when we try to upload the same zipped package through pipeline or terminal - we get the following error:

[22 Sep 2023 16:23:14,0477] PIPELINE-SCAN ERROR: The scan failed to complete: there are no results to analyze. 

Scan Summary:

PIPELINE_SCAN_VERSION: 23.9.0-0

DEV-STAGE: DEVELOPMENT

SCAN_ID: 8e6fd4f4-9894-40fa-a183-829aa571b44c

SCAN_STATUS: FAILURE

SCAN_MESSAGE: Scan failed during execution

The command we use to scan it is:

java -jar pipeline-scan.jar \

--veracode_api_id "${VERACODE_API_ID}" \

--veracode_api_key "${VERACODE_API_SECRET}" \

--file "MyPackage.zip" \

--verbose true

From the logs it seems that there upload is fine and there is a scan id assigned to it.

PIPELINE-SCAN INFO: Pipeline Scan Tool Version 23.9.0-0.

PIPELINE-SCAN INFO: Beginning scanning of 'MyPackage.zip'.

PIPELINE-SCAN INFO: Sending 9244866 bytes to the server for analysis.

PIPELINE-SCAN INFO: Upload complete.

PIPELINE-SCAN INFO: Scan ID: 6be2b46d-4f18-424f-a239-f6b31b889780

PIPELINE-SCAN INFO: Analysis Started.

PIPELINE-SCAN ERROR: The scan failed to complete: there are no results to analyze.

Is there a way to get more details about the error?

According to the Veracode documentation, only the VERACODE_API_ID, VERACODE_API_SECRET and file parameters are required.