Integrate agents with AWS CodeStar or Azure DevOps

Prerequisites

Depending on the build and package managers your repositories use, your agent host has specific requirements depending on the language scanned. To view the requirements, see the code language in Finding and fixing vulnerabilities.

AWS CodeStar

Veracode for AWS CodeStar allows you to configure automated agent-based scan commands in your AWS CodeBuild projects. You, then, add the build project to a pipeline stage in CodePipeline to analyze the build output from your application build stage and return Veracode SCA findings. For more information, see Configure an AWS CodeBuild Project for SCA.

Azure DevOps

You can create a Veracode SCA agent for PowerShell, then configure scanning as a PowerShell task in Azure DevOps.

The open-source Azure DevOps Extension integrates agent-based scans of your repositories as an automated task into your Azure DevOps pipeline.

This extension is not officially supported by Veracode.