Question
CNSI
US
Last activity: 29 Jan 2025 7:03 EST
How to get my application scanned in Veracode
Our application built on Pega 8.8.2 and I am planning to do Pega application code scan using 'Veracode'.
I am doing Static scanning, I have created product file and shared the jar/zip file to Veracode team to scan the code; We are getting error message while importing the jar file; If anyone already scanned the Pega application using the Veracode, please help to find the process of providing the Pega code to VERACODE.
Updated: 29 Jan 2025 7:03 EST
Pegasystems Inc.
GB
@RameshP8036 Pega supports Rule Security Analyzer for SAST on client-written code, but we do not have a way to support the use of commercial SAST tools (such as Veracode, Fortify, or others) on client-written code.
⚠ This is a GenAI-powered tool. All generated answers require validation against the provided references.
- Common Import Error Solutions
- If you're getting import errors, try these steps:
- Review the Remarks column in the import results for specific error messages
- Check the log files for detailed error information
- Consider compressing your JAR file into a ZIP archive before uploading
- Verify that the file size doesn't exceed Veracode's upload limits
2. When Encountering Errors
- Note the specific error message you're receiving
- Review the Veracode log files
- Document which package manager and version you're using
- Contact Veracode Technical Support with these details
For unresolved issues, Veracode Technical Support will need:
- Your package manager and version information
- The error messages from the log files
- Details about your Pega application configuration
Troubleshooting APIs and integrations
@RameshP8036 Pega supports Rule Security Analyzer for SAST on client-written code, but we do not have a way to support the use of commercial SAST tools (such as Veracode, Fortify, or others) on client-written code.
⚠ This is a GenAI-powered tool. All generated answers require validation against the provided references.
- Common Import Error Solutions
- If you're getting import errors, try these steps:
- Review the Remarks column in the import results for specific error messages
- Check the log files for detailed error information
- Consider compressing your JAR file into a ZIP archive before uploading
- Verify that the file size doesn't exceed Veracode's upload limits
2. When Encountering Errors
- Note the specific error message you're receiving
- Review the Veracode log files
- Document which package manager and version you're using
- Contact Veracode Technical Support with these details
For unresolved issues, Veracode Technical Support will need:
- Your package manager and version information
- The error messages from the log files
- Details about your Pega application configuration
Troubleshooting APIs and integrations
Troubleshooting CI/CD system integrations
From a pega perspective: For details on static scans of Pega’s product code, please contact Vendor Assessment Inquiries by email at [email protected] and that team will respond to your inquiry.
Application Security Compliance in Pega Cloud
@morem I found an 8 year old post here and wondered if you had any more up-to-date information?