Skip to main content

SCA REST API

You can use the SCA REST API to retrieve, delete, insert, or update data related to SCA Agent-based Scan. You can also query Veracode's vulnerability database, annotate SCA upload findings, and generate SBOMs.

Permissions​

Before you can use this API, you must have a UI user account. This API doesn't support API user accounts.

Authentication​

This API requires secure authentication to Veracode.

Required HTTP headers​

The Veracode SCA API requires that you set these HTTP headers in the REST requests:

  • accept-encoding: gzip
  • user-agent: a value of your choice. We recommend a company name, email domain, or application name.

SCA API specification​

The API specification is available on SwaggerHub.

Last updated on