Failed to parse input fileresults.json

[MatinaStamelakiTR]

Hi,
When using the Veracode plugin in Github, veracode/veracode-pipeline-scan-results-to-sarif is failing with the error "Failed to parse input fileresults.json" when applied to python project, (no issue for node projects). I found out that for python projects the generated results.json file doesn't contain flaw_match in findings, while for node projects there is flaw_match in findings. bou.ts file that is handling results.json is not taking into account that flaw_match may not be there. Are there any plans for a fix?

[githubrlloyd]

Thanks for the feedback. It looks like the flaw matching in our pipeline scan service doesn't have the hash values for Python, causing this error. We're looking at this and hope to have an update to the pipeline scan service that will address this issue. Will close this issue as soon as we've resolved it.

[ghost]

Hi @githubrlloyd is there any update to this issue? I've tried to integrate this action with my Python project and facing the same issue. I also tried to use the master version instead of any particular tag and still facing the same.

[brendanlafond]

Hi all - This isn't a Python related problem. This is happening with 0.1.6 version only. Looks like a flaw in the latest code adding the word "file" prefixing pipeline-results variable. It's happening for my PHP project too, which works with 0.1.5. Interesting note is that it worked without the finding-rule-level variable the first time I ran it.

Working Code:
uses: veracode/[email protected]
with:
pipeline-results-json: results.json
finding-rule-level: "4:3:1"

Failing Code:
uses: veracode/[email protected]
with:
pipeline-results-json: results.json
finding-rule-level: "4:3:1"

Error: Failed to parse input fileresults.json

[gs-scooter]

I am experiencing this exact issue on the latest version (1.0.5). I'm really stunned that this has not been addressed in over a year and a half. Do we need to downgrade to 0.1.5? Please advise.

[AngelRicardezWGU]

I'm having this issue with 1.0.5, what happen if i downgrade to 0.1.5? how many new updates i will be loosing? haha, are you planning to do something about this?

[mangesh-sadashiv-yadav-db]

Can confirm that we are still having the issue .is this already resolved or downgrade is the only option?

[wesco-prathapmotupalli]

Only for Python code, veracode/[email protected] and above are still failing to parse input file results.json
we are not able to upgrade veracode-pipeline-scan-results-to-sarif from 0.1.5 to 1.0.6. Kindly fix this issue

[brendanlafond]

There's a fix for this action to counter the missing flaw_match in v1.0.7.