Installed and configured CAST Highlight extensions in the Azure environment.While running the CAST highlight scan using the Azure DevOps extension getting the error stderr: Error: Unable to access jarfile HighlightAutomation.jar as seen below.
CASTHighlightScan
HIGHLIGHT SCAN
java -jar
103bOda04686/5.4.14\HighIightAutomation.jar" --perIInstaIIDir
analyzerDir %'home/xxxx/work/ tasks/highIightcodescan_dOxx7g4g-dxx3-4058-b56c-1xxbOxx04686/5.4.14/perI"
workingDir --sourceDir "**/rl/a" —technologies "Python" --basicAuth***********
le4346ca3610" —companyld ***** --applicationld ****—serverUrI "https://rpa.casthighlight.com/" --snapshotLabeI "*****" --kew.ardScan
stdout:
stderr: Error: Unable to access jarfile
HighlightAutomation.jar
Workaround or Action Plan
The Highlight Azure agent requires that the CLI is installed and accessible to the client agent. Please refer How to install, configure and use CAST Highlight extensions for Azure DevOps
Installation of a Custom Azure DevOps agent
Since CAST Highlight analyzers are Perl-based and as Azure DevOps-hosted agents (the virtual
machines where your builds and tasks will be executed) currently don’t support Perl, you’ll have
to deploy a custom Azure DevOps agent,
The following Microsoft resources detail how to set up an Azure DevOps custom agent:
▪ Windows: https://docs.microsoft.com/en-us/vsts/build-release/actions/agents/v2-windows
▪ Linux: https://docs.microsoft.com/en-us/vsts/build-release/actions/agents/v2-linux
Then, in order to make this extension works properly, you’ll have to install and/or run the Highlight
command line on this custom agent. Please refer to the command line documentation, depending
on the OS of your Azure DevOps agent (Windows and Linux are supported). The Highlight command line and documentation can be found from here Highlight Automated Code Scan (Command Line)
Zendesk ticket
36274
Related Articles
How to run our Docker scan image from Azure DevOps pipelines
How to install, configure and use CAST Highlight extensions for Azure DevOps
How to use Command Line’s .properties file
Comments