PGoodrich295806 (Community Member) asked a question.

I'm following the learning path for static scans. When I go to download the verademo and upload the file to scan, I get an "Error: Unknown error" result and I am unable to scan the demo app.

I want to say, I am trying to follow the instructions with a simple "Point and shoot" mindset without troubleshooting the .war file. Or any of the other files on the veracode .git repo.


lucas.ferreira likes this.
  • SamHouston (Veracode)

    Hi @PGoodrich295806 (Community Member)​ -

     

    We've figured out this issue -

    There was a release on the Verademo project that didn't include the packaged WAR file, so it's likely that you probably tried to download and scan the source file instead. We've done a new release that includes all the correct artifacts so hopefully this is corrected now.

    Expand Post
    Selected as Best
  • hello @PGoodrich295806 (Community Member)​ 

     

    Could you please provide more details? are you using a CI/CI pipeline? uploading manually? how approach do you is using?

     

    Depending on approach I can share some examples to help you

    • PGoodrich295806 (Community Member)

      I am going down the Learning Path > Static Analysis Quickstart: https://docs.veracode.com/r/Static_Analysis_Quickstart

       

      It instructs you to download a demo application and references the verademo.war file from the veracode git. https://github.com/veracode/verademo/releases. This is where I first see some issues. It looks like the last time it was updated or contributed to was in May of 2023. In the video it pulls the .war file from the 2020 release. I downloaded this file and others from the repo just to try to follow the example verbatim.

       

      I am able to create the application profile with no issues. I run into problems when I manually upload the file to be pre scanned. It seems like whatever file I download related to the verademo instructions, it fails with the same "Error: Unknown error". This is as far as I am able to get when following the learning path for a static scan.

       

      Do you need any other information? Or what else can I answer?

       

      Thank you for your time to look into this post!

      Expand Post
  • SamHouston (Veracode)

    Hi @PGoodrich295806 (Community Member)​ -

     

    We've figured out this issue -

    There was a release on the Verademo project that didn't include the packaged WAR file, so it's likely that you probably tried to download and scan the source file instead. We've done a new release that includes all the correct artifacts so hopefully this is corrected now.

    Expand Post
    Selected as Best

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.