ZRiczko188331 (Community Member) asked a question.
Veracode static scan should support modules in case of Android apps (to reduce the scope of the scan)
Now it doesn't matter what list we provide (as parameter) we always get the same result in case of Android apps. (It works pretty well in case of iOS apps.)
It seems the only recognized module is the whole app itself. We definitely need a feature to exclude our own dependencies we have dedicated security scans configured.
Now we have to use https://github.com/antfie/veracode_bulk_mitigator or https://github.com/tjarrettveracode/veracode-mitigation-copier to get rid of repeated findings from the same components.
.png){kind=logo}
Hi,
I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Open a case with Support, for static analysis and they should be able to help you
Regards,
Pranita
Veracode Inc.