Upload XML API

You can use the Veracode Upload API to create an application, upload binary modules, check prescan results, and submit a static scan request.

For example, you can call the Upload API from your build system to automatically send a new build to Veracode for analysis as soon as the build finishes.

The Veracode Upload API is a basic HTTPS-based request API that uses simple HTTP calls. For performance reasons, the Upload API automatically compresses large XML files using Gzip, if your requesting tool supports it. We recommend that you use a user agent that supports Gzip to access the Upload API. To learn about how to use the Upload API, read the tutorial.

Permissions

Before you can use this API, you must have one of the following accounts with the required roles:

• An API user account with the Upload and Scan API role.
• A UI user account with one of these roles:
  • If using the Visual Studio extensions, you need the Upload and Scan API role to add a new application.
  • The Creator role can create an application profile.
  • The Submitter role can submit a scan request.
  • The Security Lead role can perform all tasks.

Authentication

This API requires secure authentication to Veracode.