Obtain the Pipeline Scan Files

You can obtain the latest version of the Pipeline Scan as a ZIP archive from Veracode or as a container image from Docker Hub.

Steps

1. Go to one of these locations:

   • Docker Hub to use a Docker image.
   • Veracode Downloads to download a ZIP archive.

2. If you downloaded the ZIP archive, extract the contents to a local directory.

   The ZIP archive contains the pipeline-scan.jar, which includes all dependencies except the required Java 8 compatible JRE, and a README with detailed code examples. You add the full path to pipeline-scan.jar in your pipeline scripts for running a Pipeline Scan. The provided script examples include steps to both download and extract the ZIP as part of the Pipeline Scan job.

Next Steps

Run Pipeline Scans from the command line or in your development pipeline.