PK523524 (Community Member) asked a question.
OS: MacOS
Veracode Fix
Version 2.5.1
Issues in source file UserController.java:
1: CWEId 89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
on line 166 in function com.veracode.verademo.controller.UserController.processLogin
2: CWEId 89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
on line 251 in function com.veracode.verademo.controller.UserController.showPasswordHint
3: CWEId 89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
on line 316 in function com.veracode.verademo.controller.UserController.processRegister
--------------------
I gave 1 and hit Enter, below is the error that I got.
here is the error: WARN[2023-12-18 16:43:08] Issue has no stack dump. Fix accuracy will be greatly reduced
Requesting fixes...
FATA[2023-12-18 16:43:08] id is incorrect length
OS: Windows
Not able to install Chocolatey for Windows
Veracode-cli package not found
.png){kind=logo}
Hi @PK523524 (Community Member) ,
The WARN may signify that the pipeline results were not generated with the required `-esd true` or `--emit_stack_dump true` arguments. You can find more documentation on this here: https://docs.veracode.com/r/r_pipeline_scan_commands .
Please note the newer `veracode static scan` ( https://docs.veracode.com/r/veracode_static_scan ) will do this by default and is what we recommend for new projects where you do not require features like module selection of Pipeline scanning.
Veracode Fix should not give that error on the id length as far as I can see.
I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, click on your user avatar.
2. Select Contact Support from the drop-down menu.
Thank you,
Boy Baukema
To add on, if you are unable to install Chocolatey then unfortunately the CLI cannot currently be installed. We are working on additional ways to install so please check back soon!
You may be unable to find the 'veracode-cli' package as it is currently still in moderation:
https://community.chocolatey.org/packages/veracode-cli/1.10.1
We hope to resolve this soon, until that time you will need to provide a version number explicitly:
`choco install veracode-cli --version=1.10.1`.
Thank you,
Boy Baukema
Hi Boy
What is the resolution to use VeracodeFix for Windows systems as it requires Chocolatey to run cli commands.