vsankar821763 (Community Member) asked a question.
I have a veracode build_id how can i find out if that build_id belongs to sandbox scan or policy scan or promoted scan . I am try to do this via API . I am find with REST/ XML API
i tried getbuildinfo.do .. only if we pass sandbox_id in the request it is giving sandbox_id in the response But I dont have if the build is sandbox or policy
https://analysiscenter.veracode.com/api/5.0/getbuildinfo.do?app_id=sd&build_id=fd&sandbox_id=dfd"
this gives the sandbox info in the response
https://analysiscenter.veracode.com/api/5.0/getbuildinfo.do?app_id=df&build_id=fd&sandbox="
.png){kind=logo}
Hi @vsankar821763 (Community Member)
Unfortunately, getbuildinfo.do does not currently add the Sandbox ID by default. As we look to revisit this API in future updates this would be an excellent addition, please consider raising this as a Veracode Community Idea at https://community.veracode.com/s/ideas .
In the meantime, I'm afraid we'd have to encourage you to keep track not only of the
build_id but also of the associated application_id and sandbox_id.
If you have only the build_id you can use getbuildlist to check if it's a policy build and the combination of getsandboxlist and getbuildlist with -sandboxid to check if the build is part of a specific sandbox.