Scan and fix in your repo

Audience: Developers

Learning objectives

Upon completion of this module, you'll be able to:

• Set up Veracode Repository Scanning in your GitHub repo.
• Set up a demo application to scan.
• Configure and run Static Analysis scans, Software Composition Analysis (SCA) scans, and scan secrets in your repo.
• Monitor scans in your repo.
• View scan findings in your repo.
• Resolve findings in your repo with remediation guidance or suggested fixes from Veracode Fix.

Learn about, set up, and use Veracode Repository Scanning for GitHub
~20 min

Set up the Veracode GitHub Workflow Integration and secure your repo.

1. Learn about Repository Scanning.
   ~3 min
2. Set up Repository Scanning.
   ~7 min
3. Configure and run a scan, and view the results.
   ~11 min
4. To resolve findings with suggested code patches in your repo, integrate Veracode Fix with the GitHub Action or the Veracode CLI.