
Static Analysis Group (Archived) — JGallagherNuance (Community Member) asked a question.
The Veracode Annotations library is a super convenient way to automatically propose mitigations for flaws that I know to be false-positives, but it only covers a small number of flaws, such as CWE-73 (External control of file path). Can we get more annotations? For example we have CWE-506 (embedded malicious code) which is being flagged for something we coded that solves a business use case, and I'd like to put an annotation on it so that it is automatically mitigated in subsequent scans.
.png)
Hi @JGallagherNuance (Community Member) ,
We're glad you're finding the Custom Cleanser feature useful. More custom cleanser support is not currently planned as there are many other things we're working on but I would strongly recommend proposing this as an idea in the Veracode Community as this is used as input by Veracode Product Management. Please consider registering your idea with Veracode Community Ideas at https://community.veracode.com/s/ideas .
Thank you,
Boy Baukema