Hi @GDiaz136520 (Community Member)​ - hope you're well!

Make sure to do the following if you're not seeing results in Github:

Verify GitHub Actions are Allowed:

• Ensure your GitHub organization allows the necessary GitHub Actions to run. You may need to select "Allow all actions and reusable workflows" or specifically list the Veracode actions in your organization's Actions settings. (Ensure the required GitHub Actions are allowed)

Check veracode.yml Configuration:

analysis_on_platform: Make sure this is set to true if you expect to see results in the Veracode Platform. If it's false, scans will run but results won't be submitted to the platform. (`veracode.yml` configurations)

After a scan is completed, you can view the Veracode security findings in a few places within GitHub:

Status Checks: You can find the Veracode security findings in the Checks section of your pull request. These checks will indicate whether the security checks were successful, unsuccessful, or are still in progress. The Files changed tab within the pull request will also show the findings details inline, highlighting the exact location of the flaw in the code. (View results in GitHub)

Code Scanning Alerts: If you have enabled code scanning alerts in your repository and configured create_code_scanning_alert to true in your veracode.yml file, you can view your Static Analysis findings under the Security > Code scanning section of your GitHub repository. (Code scanning alerts)

GitHub Issues: If you have configured Veracode to trigger scans via GitHub issues, the findings can be viewed within the issues dashboard for your project. (GitHub Issues)

If you have set analysis_on_platform to true in your veracode.yml file, you can also view the scan results directly in the Veracode Platform. (Reviewing results in the Veracode Platform)

You're also welcome to reach out to us via Support Case here:

https://community.veracode.com/s/contact-support