Troubleshooting GRC Integrations

Veracode APIs

This section helps you remedy common problems and understand how better to use the Archer API for Veracode GRC integrations.

Issue Solution
Invalid IP address range. Ensure that you are attempting to connect from an IP address that is allowed by the IP address restrictions for the login you are using. Veracode APIs and integrations require access to analysiscenter.veracode.com and api.veracode.com. Contact your IT team to ensure these domains are on the allowlist for your organization and that there is one-way communication on port 443 to api.veracode.com. Refer to the complete list of domains and IP addresses to add to your allowlist.
Invalid login type. Ensure that you are providing credentials for an API class login with the Archer API role.
Invalid or null token. Each login account is limited to using five tokens at a time to download Archer reports. The last five generated tokens are valid. All tokens expire after 30 days whether they are used or not. Using invalid tokens returns HTTP status code 403.
Incorrect date format. The date format used by the date_from and date_to fields is dd-mm-yyyy, meaning, date then month and year.
The report not ready. If you try to call  downloadarcherreport.do  before  generatearcherreport.do  has completed, you receive HTTP status code 204 to indicate no content is available. Try to download the report at a later time. After an excessively long time, if the Veracode Platform does not return the report, contact Veracode Technical Support.
The results file is too large. When attempting to fetch the Archer feed for a large number of applications at once, the Veracode Platform may return HTTP status code 500. It is best in these cases to fetch the data using the optional arguments for the Archer API to limit the scope of the data being pulled, for example using scan_type or a date range. Once all the historical data is in place, use one of the  period arguments (yesterdaylast_week, or last_month) to pull data on a scheduled basis.

Alternatively, you can use the asynchronous calls, downloadarcherreport.html and generatearcherreport.html.