Static Analysis Group (Archived) — JGallagherNuance (Community Member) asked a question.

More annotations (custom cleansers) for other flaw types?

The Veracode Annotations library is a super convenient way to automatically propose mitigations for flaws that I know to be false-positives, but it only covers a small number of flaws, such as CWE-73 (External control of file path). Can we get more annotations? For example we have CWE-506 (embedded malicious code) which is being flagged for something we coded that solves a business use case, and I'd like to put an annotation on it so that it is automatically mitigated in subsequent scans.


VCode likes this.
  • Hi @JGallagherNuance (Community Member)​ ,

     

    We're glad you're finding the Custom Cleanser feature useful. More custom cleanser support is not currently planned as there are many other things we're working on but I would strongly recommend proposing this as an idea in the Veracode Community as this is used as input by Veracode Product Management. Please consider registering your idea with Veracode Community Ideas at https://community.veracode.com/s/ideas .

     

    Thank you,

    Boy Baukema

    Expand Post

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.