Manage analyses and scans
Manage analyses and scans for Veracode Dynamic Analysis in the Veracode Platform or using the REST API.
To perform these tasks, ensure you meet the prerequisites.
Update authentication settings
Add or update your login credentials in an analysis for accessing the web applications or APIs at the specified URLs.
To complete this task:
- Sign in to the Veracode Platform.
- Select Scans & Analysis > Dynamic Analysis.
- In the All Dynamic Analyses table, select the analysis you want to configure.
- In the URLs List or API Specifications List table, locate the web URL or API server you want to configure.
- In the Actions column, select Configure.
- In the Configure window, scroll to the Authentication section.
- Select Required, if not selected.
- For a web application, Auto-login is the default. Enter the username and password. For APIs or web applications that require additional authentication, such as basic authentication (browser-generated) or a login script (web applications only), select the checkbox for that option and enter the configuration settings. For more information, see the authentication methods for scanning web applications or APIs.
Prescan web applications and APIs
You can prescan all URLs or API servers in a Dynamic Analysis to verify that we can reach and, if necessary, authenticate with each target web application URL or API endpoint.
Prescanning saves time by alerting you to any issues that Veracode finds with the configuration before the Dynamic Analysis runs.
To complete this task:
- Go to the Schedule page of the Dynamic Analysis workflow and select the Prescan Only option. The prescan starts immediately after submission. When the prescan completes, you receive an email notification of the results. The Dynamic Analysis still starts regardless of the results of the prescan.
- If the prescan fails, check your connections and authentication configuration settings, and run prescan again.
- If you need assistance from Veracode with any of the issues found during prescan, select Contact Support in the bottom-left of the Review and Submit window.
Results:
The prescan results are available on the Dynamic Analysis summary page. You can view the details of the prescan at any time by going to the URL row and, either clicking the URL or selecting View Prescan Details in the Actions column.
Additional troubleshooting information is available in the Verification Screenshots section, which provides screenshot images that the Veracode scan engine takes at predetermined points. You can use these images to gain insight into what the scan engine discovers during a Dynamic Analysis. For example, the Authentication: Logged In screenshot can verify that the page on which the scan engine lands after executing the login script matches expectations. The Connection: Target URL screenshot can determine that a login script failed because a page redirects to different content for requests that originate from outside the corporate intranet.
Verification Screenshots
| Screenshot type | Description |
|---|---|
| Connection: Target URL | The web page state seen by the Veracode scan engine at the end of connection verification, at the start of a scan or prescan. |
| Authentication: Consecutive Login Failure | Shown after the Veracode scan engine is unable to log in to a target application after 50 consecutive attempts. |
| Authentication: Logged In | Shown after the Veracode scan engine executes a user-provided Selenium login script. If the best practice of including a verification command in the Selenium script is not followed, the screenshot might show an early snapshot of the page, which might not show what the site really looks like when logged in. |
| Authentication: Logged Out | Shown after the Veracode scan engine executes a user-provided Selenium logout script. Logout scripts are optional, and this screenshot is omitted if one is not specified. |
| Authentication Failure | Shown if the Veracode scan engine encounters an error while verifying authentication using a user-specified login or logout script. |
Prescan Notes
Displays one or more scan notes based on the following severities.
Information: non-actionable issues encountered by the scan engine.Warning: issues that could impact coverage of the scan. For example, a login script that does not contain commands to verify its successful execution could possibly fail in future scans.Error: exceptions that have resulted in early scan termination, such as the repeated inability to execute Selenium scripts due to a site changing during a scheduled scan.
Prescan errors
Prescan errors comprise two types: connection errors and authentication errors. You can review any prescan errors for a Dynamic Analysis in the Veracode Platform. All prescan errors relate to connection, auto-login, basic authentication, or login script issues.
The Prescan Details window provides information for fixing a specific error. To open the Prescan Details window, on Dynamic Analysis summary page, in the row of the URL scan you want to review, select Actions > View Prescan Details.
Connection errors
These tables provide corrective actions for prescan connection and authentication errors. After troubleshooting the problem you are experiencing, verify the Dynamic Analysis configuration and run prescan again. If a failure persists, contact Veracode Technical Support.
| Error message | Definition and corrective actions |
|---|---|
Unresolvable hostname | Veracode was not able to resolve the hostname. Verify the hostname and try again. |
Unreachable port | Veracode was not able to reach the destination port. Verify the port and try again. |
Connection error | Veracode was not able to connect to the target URL. Verify the URL and its connectivity, and try again. |
Server error | There is an error on the target server. Verify the server is connected and available, and try again. |
No target found | Veracode did not find the target URL at the site. Verify you have entered the correct URL and try again. |
Empty response received | Veracode received an empty response from the target URL. Verify the web server is correctly configured and try again. |
Blocklisted URL | This URL is on the blocklist and will not be analyzed. Enter a new URL. |
No response from server | Veracode received no response from the host server of the target URL. Verify the URL and its connectivity, and try again. |
Non-allowlisted URL | This URL is not on the allowlist and will not be analyzed. Enter a new URL. |
Excessive redirect | This URL has an infinite or excessively long redirection loop and will not be analyzed. Enter a new URL. |
Timeout error | This URL returned an HTTP protocol-level timeout error indicating there is a problem with network congestion or connection throttling by a proxy server. Verify your network infrastructure and connectivity, and try again. |
Malformed URL | This URL does not adhere to the URI syntax. Re-enter the URL with the correct syntax. |
Non-allowlisted URL redirection | The request to the target URL results in a redirection. Verify the URL and try again. |
Blocklisted URL redirection | The request to the target URL redirects to a URL that is on the blocklist and will not be analyzed. Enter a new URL. |
For connection errors, review:
- In the Connection section, the Authentication Verification, Login Successes, and Login Failures fields for the specific reason why you have an authentication issue
- Request and Response section for any
4xxx-5xxresponse codes - Prescan Notes for any warning notes
If Veracode cannot connect to the target URL, verify:
- URL is spelled correctly and uses the correct protocol.
- URL is live and available.
34.195.146.191is on your allowlist.- If there is heavy traffic causing the connection to fail.
Authentication errors
| Error message | Definition and corrective actions |
|---|---|
Missing credentials | You have not provided any browser-based credentials. Enter the credentials and try again. |
Invalid credentials | The browser-based credentials you provided are invalid. Verify the credentials and try again. |
Selenium script failure | The Selenium login script you provided has failed. Record a new script and try again. |
Browser failure | The browser was unresponsive while executing the login script. Record a new script and try again. |
Verification text failure | The verification text failed. Verify that the verification text is present on the page after login. |
Auto-login failure | Auto-login failed. Verify your credentials and try again. |
Verification text failure | The verification text failed. Edit the login script to provide the verification text that is only present after successful login. |
Authentication alert | No browser authentication was encountered. Verify the type of authentication necessary for the website and try again. |
Logout pattern failure | No logout patterns were detected. Verify the logout pattern, ensure that at least one resource that requires authentication is accessible from the target URL. Then, try again. |
Logout pattern failure | Too many logout patterns were detected. Verify the logout pattern and the authentication credentials, and try again. |
Logout pattern failure | Veracode could not detect any logout patterns. Contact Veracode Technical Support if this error persists. |
Logout pattern failure | Veracode detected numerous logout patterns. Verify the logout pattern and authentication credentials, and try again. |
Blocklisted URL | The login verification is blocklisted. Change the URL or remove it from the blocklist. |
URL error | Requests to the login verification URL resulted in a network error. Correct the URL and ensure your web server is online. |
Non-allowlisted URL | The login verification URL is not an allowed host. Change the URL and ensure it is not on the blocklist. |
Redirection error | Requests to the login verification URL resulted in numerous HTTP redirects. Correct the URL or change the redirects. |
Unsuccessful response | Requests to the login verification URL resulted in an unsuccessful HTTP response. Correct the URL and ensure your web server is online. |
Malformed URL | The login verification URL does not adhere to URL syntax. Correct the URL and try again. |
Non-allowlisted URL | The login verification URL redirects to a URL that is not an allowed host. Correct the URL and try again. |
Blocklisted URL | The login verification URL redirects to a URL that is on the blocklist. Correct the URL or change the redirects, and try again. |
For authentication errors, review:
- The Authentication Verification, Login Successes, and Login Failures fields for the specific reason why you have an authentication issue
- The Verification Screenshots section for any authentication failure
- The Prescan Notes for any warning notes
If you have provided a login script, you can select a verification screenshot of the associated login errors.
If authentication has failed, verify:
- You are using the correct username, password, and domain (if applicable). The Login Successes and Login Failures fields indicate if auto-login is working.
- Any login script, verification URL, and verification text you provided is still valid. The Authentication Verification field indicates at which point in your script an error occurred, saving you troubleshooting time.
Schedule an analysis
You can schedule a Dynamic Analysis to run one time, either immediately after you submit it or on a specific date, or on a recurring schedule. You can also schedule the analysis to pause and resume on specific days or times.
To configure a schedule with the REST API, see Dynamic Analysis REST API.
Because Dynamic Analysis scans each API specification quickly, We recommend that you do not pause and resume the analysis.
Schedule a one-time scan
You can schedule a Dynamic Analysis in the Veracode Platform to run only one time. When you are ready to run the analysis, you can start it immediately or schedule it to run on a date up to 90 days in the future. You can also configure the analysis to run on a recurring schedule.
You can also a schedule an analysis with the REST API.
Before you begin:
Ensure you have:
- A Veracode account with the Creator, Submitter, or Security Lead role.
- If you want your analysis to automatically pause when it encounters an authentication error, your account must have the Auto-Pause feature. You can configure the analysis to resume automatically or manually. To enable this feature, contact Veracode Technical Support.
- Created a Dynamic Analysis of a web application or API and selected Schedule at the bottom of the page in the Veracode Platform.
To complete this task:
-
On the Dynamic Analysis Schedule and Prescan page, for Frequency, select Once.
-
If you are configuring an existing analysis that has already run, and you want to run it again using the updated schedule, select Scan again with this configuration and updated start date and time. If you are creating a new analysis, you do not see this option.
-
Optionally, to run a prescan before the analysis starts, turn on Prescan. Because a prescan requires two hours to run, the start time must be at least two hours in the future, or Prescan is disabled. After you update the start time, Prescan is enabled.
-
For Start, select the date and time when you want the analysis to start.
-
For Analysis Duration, enter the maximum number of hours or days that you want the analysis to run.
-
In the Pause and Resume section, if your account has the Auto-Pause feature, you see the Pause automatically and resume option. If your account does not have this feature, you see an Off option, and you can ignore this step.
Select one of the following options:
- manually: the analysis remains paused until you fix the error and resume it manually. The default.
- automatically: after you fix the error, you must wait for the analysis to resume. You cannot resume the analysis manually. The analysis resumes during the next scheduled run.
-
To schedule the analysis to pause automatically, so that it only runs on specific days or during specific times, select Pause. Then, select from the following options:
- on these days: pause the analysis on the selected days.
- during this period: pause the analysis every day during the selected period.
- on these days, during these periods: pause the analysis on the selected days, during the selected periods.
The analysis resumes automatically, outside the configured pause schedule.
-
Optionally, to review a summary of the schedule, select Preview Schedule.
-
To save the schedule and continue to the next steps, select Review and Submit.
Schedule a recurring scan
You can configure a recurring schedule of your Dynamic Analysis in the Veracode Platform to run on a set day and time each week or month. You can also schedule the analysis to automatically pause and resume at specific times, such as IT downtimes or high-traffic timeframes.
You only have to configure the pause and resume schedule once, and it recurs automatically without any further manual intervention for the duration of the analysis. You can edit the pause and resume schedule or turn it off at any time.
You can also schedule a recurring analysis with the REST API.
Before you begin:
Ensure you have:
- A Veracode account with the Creator, Submitter, or Security Lead role.
- If you want your analysis to automatically pause when it encounters an authentication error, your account must have the Auto-Pause feature. You can configure the analysis to resume automatically or manually. To enable this feature, contact Veracode Technical Support.
- Created a Dynamic Analysis of a web application or API and selected Schedule at the bottom of the page in the Veracode Platform.
To complete this task:
-
On the Dynamic Analysis Schedule and Prescan page, for Frequency, select Recurring.
-
Optionally, to run a prescan before the analysis starts, turn on Prescan. Because a prescan requires two hours to run, the start time must be at least two hours in the future, or Prescan is disabled. After you update the start time, Prescan is enabled.
-
For Start, enter the date when you want the schedule to start, or select the calendar icon and select a date. If you set the start day for the 28th or later, the analysis starts on the last day of the month.
-
From the Recur dropdown, select Weekly or Monthly.
-
For Every, enter the recurrence frequency in weeks or months.
-
From the On dropdown menu, select the day on which you want the scan to recur.
-
For End After, enter the number of weeks or months that you want the recurrence schedule to last.
-
For Start, select the date and time when you want the analysis to start.
-
For Analysis Duration, enter the maximum number of hours or days that you want the analysis to run.
-
In the Pause and Resume section, if your account has the Auto-Pause feature, you see the Pause automatically and resume option. If your account does not have this feature, you see an Off option, and you can ignore this step.
Select one of the following options:
- manually: the analysis remains paused until you fix the error and resume it manually. The default.
- automatically: after you fix the error, you must wait for the analysis to resume. You cannot resume the analysis manually. The analysis resumes during the next scheduled run.
-
To schedule the analysis to pause automatically, so that it only runs on specific days or during specific times, select Pause. Then, select from the following options:
- on these days: pause the analysis on the selected days.
- during this period: pause the analysis every day during the selected period.
- on these days, during these periods: pause the analysis on the selected days, during the selected periods.
The analysis resumes automatically, outside the configured pause schedule.
-
Optionally, to review a summary of the schedule, select Preview Schedule.
-
To save the schedule and continue to the next steps, select Review and Submit.
Check the status of a scheduled scan
After you submit the Dynamic Analysis, the summary of the schedule displays at the top of the summary of the Dynamic Analysis. You receive an email notification of any verification errors and also when the Dynamic Analysis is complete.
From the All Dynamic Analysis Scans page, you can review the schedule of any Dynamic Analysis by hovering over the clock icon in the row for that Dynamic Analysis. The respective schedule displays, providing at-a-glance information. If a Dynamic Analysis is scheduled to run only once or if the recurrence timeframe has ended, you can verify the status of the schedule to see if any more occurrences are scheduled.
To complete this task:
- In the Veracode Platform, select Scans & Analysis > Dynamic Analysis.
- In the list of All Dynamic Analysis Scans, select Edit from the action menu in the row of the Dynamic Analysis that you want to check.
- At the bottom of the Edit page, select Schedule. In the Dynamic Analysis Scheduling section, you can see if the analysis is scheduled.
- If the analysis is scheduled, and you want to cancel it, select Cancel schedule and save for later.
Stop a scheduled scan
You can stop a Dynamic Analysis that runs on a schedule. When stopping the scan, you can choose to save or delete the available scan results.
To complete this task:
-
In the Veracode Platform, select Scans & Analysis > Dynamic Analysis. The All Dynamic Analyses page opens.
-
Locate the row for the Dynamic Analysis you want to stop.
-
From Actions, select Stop Analysis.
-
Select to stop the analysis and to either save or delete the results.
-
Select View Results in the Actions column to review the results.
If you want to run the Dynamic Analysis again with the same configuration, edit the schedule to rerun the scan on your new selected day and time.
Manually resume a paused scan
You can manually resume a scheduled Dynamic Analysis that is paused due to an authentication error.
For example, if an analysis uses invalid credentials to sign in to a target URL or API, after multiple attempts, the analysis changes to a paused state. After you update the credentials in the analysis configuration for a web application or API, you can manually resume the analysis. The analysis resumes its schedule and uses the updated credentials to sign in.
Before you begin:
Ensure you have:
- Enabled the Auto-Pause feature for your Veracode account. To enable this feature, contact Veracode Technical Support.
- A Veracode account with the Creator, Submitter, or Security Lead role.
- Created a Dynamic Analysis that is scheduled to run one-time or on a recurring schedule. In the Veracode Platform, on the Schedule page for the analysis, in the Pause and Resume section, ensure Pause automatically and resume is set to manually.
- Resolved the authentication errors.
To complete this task:
- In the Veracode Platform, select Scans & Analysis > Dynamic Analysis.
- On the All Dynamic Analyses page, locate the row for the analysis you want to resume.
- From Actions
, select Resume Analysis. When you scheduled the analysis, if you set Pause automatically and resume to resume automatically, the Resume Analysis action is disabled. The analysis resumes and continues to run on its schedule.
View historical details for an analysis
You can view detailed information about all occurrences of a Dynamic Analysis, including scan results, in the Veracode Platform.
You can use the historical information to understand when the analysis and scans, occurred, how often, the analysis duration, the schedule, if any, its current status, and whether it completed successfully. The past occurrences are read-only as they provide an historical record for the selected analysis. You can only change the most recent occurrence of an analysis.
You can also get the historical information with the REST API.
Before you begin:
You must have the Creator, Reviewer, or Security Lead role. Any member of the team associated with the Dynamic Analysis is able to view the analysis and its results.
To complete this task:
-
In the Veracode Platform, select Scans & Analysis > Dynamic Analysis. The All Dynamic Analyses page opens.
-
Locate the row for the Dynamic Analysis for which you want to view historical information.
-
To open the Analysis History window, from Actions at the end of the row, select View Analysis History.
The Analysis History window shows a list of past occurrences for the selected analysis with the following information:
- Analysis Occurrence ID: unique ID for a specific analysis.
- Analysis Status: current status of the analysis.
- Actual Start and Actual End: timestamp when the analysis started and finished, whether manually or on a schedule.
- Scheduled Start and Scheduled End: for a scheduled analysis, the timestamp when it is scheduled to start and finish. These times indicate when the analysis is scheduled to run compared to the times when it actually started and ended.
-
Optionally, from the Filter by dropdown menu, you can select to show only analyses with a specific status or to include or exclude prescans. Then, select Apply to filter the list.
-
In the Analysis Occurrence ID column, select a link to close the Analysis History window and open a read-only page with more detailed information about the selected occurrence. From the Analysis Actions dropdown menu, you can select Configure Most Recent Analysis to go to the Edit page for the most recent occurrence of the selected analysis. Any changes to the analysis configuration only apply to future analyses.
-
To view the historical scan results for the selected analysis, in the URLs List or API Specifications to Scan table, select a URL or specification. The Scan Details page opens with read-only information about the selected scan occurrence. From the Scan Actions dropdown menu, you can select Configure to edit the scan configuration. Any changes to the scan configuration only apply to future scans.
Monitor status
You can view Dynamic Analysis scans in the Veracode Platform to verify status updates. All actions and statuses are available in the activity log located at the bottom of the Dynamic Analysis summary page.
After submitting your analysis, you can return to the list of Dynamic Analysis scans at any time to verify status updates. To find a specific Dynamic Analysis scan, enter the name of a scan and select Find.
Go to the All Dynamic Analysis Scans page and select the Dynamic Analysis you want to edit. Then, on the Dynamic Analysis summary page, select Configure Analysis in the Analysis Actions menu. The data in the analysis summary table automatically refreshes so you do not need to manually refresh the page to see updated information. Edit the configuration details that you want to change and select Save.
Analysis statuses
This table lists all the possible statuses for a Dynamic Analysis.
| Status | Description |
|---|---|
Completed - Verifying Results | Dynamic Analysis completed successfully. Veracode is verifying the results, which will be available after the review is complete. |
Completed - Verifying Partial Results | Dynamic Analysis completed with partial results because one or more scans failed verification. Veracode is verifying the results, which will be available after the review is complete. |
Completed - Partial Results Available | Dynamic Analysis completed with partial results because a user action, a verification failure, a scan duration timeout, or a system error interrupted the scan. |
Completed - Results Available | Dynamic Analysis completed successfully. You can now view the results. |
In Progress | Dynamic Analysis started and is now running. |
In Progress + showing a warning icon | Dynamic Analysis started and is running, but one or more target URLs failed verification. |
Not Submitted | A technical issue occurred. Try submitting your Dynamic Analysis again. |
Prescanning | Veracode is performing a prescan of the URLs to verify connection and authentication settings. |
Queued | Dynamic Analysis is submitted and waiting for available scan capacity. |
Scheduled | Dynamic Analysis is scheduled. |
Stopped - Deleting Results | A user stopped the Dynamic Analysis and deleted the results. |
Stopped - Saving Results | A user stopped the Dynamic Analysis and saved the results. |
Stopped - Scan Duration Ended | The scan duration limit was reached and the scan was stopped. Increase the scan duration if you need more time for your scan to complete. |
Stopped - Scan Duration Ended With Partial Results | The scan duration limit was reached and the scan was stopped. Veracode now reviews the results and will publish them after the review. |
Stopped - Technical Issue | An issue occurred and the Dynamic Analysis is stopped. Contact Veracode Technical Support if the issue continues. |
Stopped - Verifying Results | Dynamic Analysis completed as much as possible. You can now view the results. |
Stopped - Verifying Partial Results | Dynamic Analysis stopped because of user action, a verification failure, a scan duration limit reaching, or a system error. Veracode is verifying the partial results, which will be available after the review. |
Stopped - Partial Results Available | A user stopped the Dynamic Analysis and produced partial results. |
Time Expired - Verifying Partial Results | The scan duration limit reached and Dynamic Analysis produced partial results. Veracode is verifying the partial results, which will be available after the review. Increase the scan duration if you need more time for your Dynamic analysis scan to complete. |
Submitted | You successfully submitted the Dynamic Analysis. |
All Verifications Failed | All scans failed verification, and the Dynamic Analysis cannot run. Review your scan settings and try again. |
You can filter on the specific status of the Dynamic Analysis scans if you want to only see a list of the scans that are in a specific state. In the Filter by Status dropdown menu, select the status on which you want to filter.
You can edit the entire Dynamic Analysis at any time when it has a status of:
ScheduledStoppedPublished - Results AvailableSaved for Later
Scan statuses
You can view the status of a specific URL scan or API specification scan in a Dynamic Analysis on the Scan Details tab.
The URL scan status provides additional information about the individual scan associated with the URL, which can differ from the status of the overall analysis. The URL scan status is also displayed in the list of URLs on the Dynamic Analysis Summary page.
| URL Scan Status | Description |
|---|---|
Submit Failed | Veracode encountered a technical issue and could not scan the URL. |
Scheduled | The URL is scheduled to scan. |
Submitted | Veracode received your scan request. |
In Progress | The scan has started. |
Verification Failed | Veracode cannot scan the URL. Review the URL configuration and try again. |
Queued with warning | The scan is in the queue because your subscription has no available capacity. |
Queued | The scan is in the queue and ready to start. |
Stopping - Saving Results | A user stopped the scan and saved the results. |
Stopping - Deleting Results | A user stopped the scan and deleted the results. |
Stopped | The scan stopped successfully. |
Site unreachable - Stopped | The scan stopped because the site became unreachable. Verify that the site is online and has stable network connectivity. |
Site unreachable - Verifying Results | The scan stopped because the site became unreachable. Verify that the site is online and has stable network connectivity. Veracode is verifying the results, which will be available after the review. |
Site unreachable - Results Available | The scan stopped because the site became unreachable. Results are available, but coverage may be lower than expected. |
Time Expired - Stopped | The scan duration limit was reached and the scan was stopped. Increase the scan duration if you need more time. |
Technical Issue - Stopped | Veracode encountered a technical issue and could not continue the scan. |
Time Expired - Verifying Partial Results | The scan duration ended and stopped the scan. Veracode is verifying the partial results, which will be available after the review. Increase the scan duration if you need more time for your scan to complete. |
Time Expired - Partial Results Available | The scan duration ended and stopped the scan. Partial results are available. Increase the scan duration if you need more time. |
Pausing | The scan is scheduled to pause automatically. |
Resuming | The scan is scheduled to resume automatically. |
Stopped - Verifying Partial Results | A user stopped the scan. Veracode is verifying the results, which will be available after the review. |
Stopped - Partial Results Available | A user stopped the scan. Partial results are available. |
Scan Error - Verifying Partial Results | The scan stopped unexpectedly. Veracode is verifying the results, which will be available after the review. |
Scan Error - Partial Results Available | The scan stopped unexpectedly. Partial results are available. |
Lockout - Verifying Partial Results | The scan engine stopped the scan after repeated failed sign-in attempts. Veracode is verifying the results, which will be available after the review. |
Lockout - Partial Results Available | The scan engine stopped the scan after repeated failed sign-in attempts. |
Completed - Verifying Results | The scan completed successfully. Veracode is verifying the results, which will be available after the review. |
Completed - Results Available | The scan completed successfully. Results are available. |
Crawl Script Error | Veracode could not scan the URL because the crawl script contains errors. Review the crawl script and try again. |
Authentication Error | Veracode could not scan the URL due to authentication errors. Verify the credentials to ensure they are accurate, and review the Selenium login and logout scripts. |
Connection Error | Veracode could not connect to the target URL. Verify that the site is accessible from the internet. If it is not, configure Veracode Internal Scanning Management (ISM). |
Notification events
Veracode sends email notifications at significant points during the Dynamic Analysis lifecycle.
This table lists the current Dynamic Analysis prescan notifications. Veracode sends the notifications to either the person who created the Dynamic Analysis scans or the last person who modified a schedule.
| Event | Description |
|---|---|
| The prescan of a Dynamic Analysis succeeded. | All URL configurations in your Veracode Dynamic Analysis request passed prescan verification. |
| The prescan of a Dynamic Analysis failed. | The target URL configurations in your Veracode Dynamic Analysis request failed during prescan verification. |
This table lists the current post-scan results notification of full Dynamic Analysis scans that Veracode sends to the security leads in your organization. Veracode also sends these notifications to specified internal Veracode users, such as the solution architect, customer success manager, and sales associate.
| Event | Description |
|---|---|
| The results of a Dynamic Analysis are published. | The results of a Dynamic Analysis are published and now available. |
Delete a scan
You can use the Veracode Platform to delete a Dynamic Analysis scan of a web application or API.
When you delete a scan you permanently remove its scan configuration and all results from any Dynamic Analysis.
You can also delete Dynamic Analysis scans with the REST API.
Before you begin:
- Confirm your account has the Creator or Security Lead role.
- Ensure the status of the scan you want to delete is not
In Progress. If you see this status, you must wait for the scan to complete.
To complete this task:
- In the Veracode Platform, select Scans & Analysis > Dynamic Analysis.
- In the All Dynamic Analyses table, select the name of an analysis.
- In the URLs List or API Specifications List, locate a scan.
- From the Actions menu
, select Delete.
- To confirm that you want to delete the scan, in the Delete Scan window, select OK.
Delete an analysis
You can delete a Dynamic Analysis if no instances of the Dynamic Analysis are running. You must have the Creator or Security Lead role to be able to delete a Dynamic Analysis.
To delete a Dynamic Analysis, on the row for the analysis you want to select, select Actions > delete . When prompted, confirm that you want to permanently remove all results and URL configurations for this Dynamic Analysis.