
SKofod108694 (Community Member) asked a question.
I'm using an Azure DevOps pipeline to run an application scan.
The scan is executed by using the task Veracode@3 and it works fine.
But how do I read the result of the scan in a later task in the same pipeline?
Based on the pipeline output it seems like it ends up here `Output filepath: D:\a\_tasks\Veracode_6292a058-d4f5-407b-b6c6-815df9ee59d6\3.24.0\reports\detailedReportdata.xml` but I'm not really sure how to generate that path dynamically. I don't really feel like hardcoding that path in my yaml file.
This is also being printed th the pipeline output:
```
Attaching summary report data to the build
{"_severityDTOList":[{"_level":0,"_totalFailedCount":"1","_totalMitigatedCount":0},{"_level":1,"_totalFailedCount":"0",..........
```
So does the above indicate that I can get the report data somehow from the build data?
.png)
hello @SKofod108694 (Community Member)
We have some options to do that.
Azure DevOps:
Hi. Thank you for the response.
It seems like "importResults true" just generates a new tab in the run summary. Do you know how I can access this data programatically?
Maybe sending a request to the API to get detailedreport is a solution, but it seems a but cumbersome and the report is already there. It's location is just not very convenient because it is located in the veracode task folder that as a guid and version number. So hardcoding the path to that would break as soon as you release a new version. It would have been nice if the veracode task had an option to specify an file path to where it should store the resulting report.
sorry for delay @SKofod108694 (Community Member)
import results will generate a executive and summary report into Azure Pipelines. It will show you number of vulns and cwes
Veracode Task automatically do some other things.
You can test Veracode wrappers to upload and scan and then download report instead of doing by Veracode Task
You can download C# wrapper or Java Wrapper, and automate things using CMD Task or Powershell taks
Upload and Scan: uploadandscan | Veracode Docs
Download reports: https://docs.veracode.com/r/r_detailedreport
After, you can output report downloaded into an artifact for example