
DBoston211672 (Community Member) asked a question.
My team has a pnpm project, that unfortunately is not supported by Veracode. We are able to generate a cyclonedx SBOM, and are hoping to upload this for scanning as a workaround.
We already use the api-wrapper-java sdk for uploading non-pnpm projects for traditional SCA scanning, and ideally would like to use the wrapper when uploading SBOM files as well.
I'm also curious; the SBOM Upload File API documentation does not allow specifying a sandbox or application name. Is it possible to associate an SBOM scan with a sandbox/application?
Thanks!
-Drew
.png)
Hello,
I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Open a case with Support, and they will be able to assist you.
Regards,
Pranita
Veracode Inc.