Finding and Fixing Vulnerabilities

Veracode Software Composition Analysis

Getting Started with Veracode SCA
About Veracode SCA
Choosing the SCA Scan Type for Your Use Case
Using Veracode SCA with Programming Languages
About Supported Languages and Tools for Agent-Based Scans
Understanding Language Support for Veracode SCA Upload Scans
Integrating Veracode SCA with Developer Tools
Using Best Practices with Veracode SCA
Veracode SCA Best Practices for Automated CI/CD
Veracode SCA Best Practices for Reviewing Compliance for Periodic Releases
Start Your First Veracode SCA Agent-Based Scan
Requesting a Veracode SCA Upload Scan
Link SCA Projects to Applications
Video: Set Up an Agent to Scan with Veracode Software Composition Analysis
Video: Upload and Scan with Veracode Software Composition Analysis
Understanding Veracode SCA Roles
Using Veracode SCA with the REST APIs
Veracode SCA Glossary of Terms
Agent-Based Scans
Agent-Based Scan QuickStart Help
Accessing Veracode SCA Agent-Based Scanning from the Veracode Platform
Video: Set Up an Agent to Scan with Veracode Software Composition Analysis
Using the Agent-Based Scanning Report Features
Create a Veracode SCA Workspace
Add Teams to Your Veracode SCA Workspace
Automate Security Checks for Agent-Based Scanning
Explore the Veracode Vulnerability Database
Setting Up Agent-Based Scans
Continuous Integration
Integrate Veracode SCA Agent-Based Scanning with Your CI Projects
Integrating Agent-Based Scanning with Atlassian Bamboo
Create Your Agent-Based Scanning Authentication Token for Atlassian Bamboo
Set a Global Variable for Atlassian Bamboo
Set a Plan Variable for Atlassian Bamboo
Configure Your Bamboo Repository
Bitbucket
Create Your Agent-Based Scanning Authentication Token for Bitbucket
Set the Bitbucket Account Environment Variable
Set a Bitbucket Repository Environment Variable
Configuring a Pipelines Repository
CircleCI
Create Your Agent-Based Scanning Authentication Token for CircleCI
Set the CircleCI Environment Variable
Codeship Basic
Create Your Agent-Based Scanning Authentication Token for Codeship
Configure Your Codeship Repository
Codeship Pro
Create Your Agent-Based Scanning Authentication Token for Codeship
Configure Your Codeship Pro Project
GitLab
Create Your Agent-Based Scanning Authentication Token for GitLab CI
Configure Your GitLab CI Environment Variable
Configure Your GitLab Repository
Jenkins/Hudson (Shell)
Agent-Based Scanning Jenkins Plugin Prerequisites
Create Your Agent-Based Scanning Authentication Token for Jenkins
Bind Your Jenkins Environment Variable
Configure Your Agent-Based Scanning Jenkins Job
Travis CI
Create Your Agent-Based Scanning Authentication Token for Travis CI
Set Your Travis CI Environment Variable
Configure Your Travis CI Repository
Desktop
CLI
Using the Veracode SCA Command-Line Agent
Video: Set Up an Agent to Scan with Veracode Software Composition Analysis
Install the Veracode SCA CLI Agent
Install the Veracode SCA Agent with PowerShell
Gradle
Set Up the Agent-Based Scanning Gradle Plugin
Configuring the Gradle Plugin
Maven
Set Up the Agent-Based Scanning Maven Plugin
Configuring the Maven Plugin
Issues Integration
Create an Agent-Based Scanning Integration for Jira Cloud
Creating Jira Ticket Templates and Issues for Agent-Based Scanning
Atlassian Jira Legacy Integration for Veracode SCA
Create an Agent-Based Scanning Integration for GitHub
Creating and Fixing Agent-Based Scanning GitHub Issues
Using Agent-Based Scans
About Agent-Based Scanning
Understanding Deployment Options for Agent-Based Scanning
Understanding Agent-Based Scanning Evidence Collection
About the Veracode Vulnerability Database
Understanding Veracode SCA Workspaces
Using My Workspace for Veracode SCA
Link SCA Projects to Applications
Frequently Asked Questions for Agent-Based Scanning
Agent-Based Scan Configuration
About Veracode SCA Agent Management
Use the Agent with an SCM Other than Git
Enable Agent-Based Scanning Behind a Proxy
Using the Veracode SCA Agent
Configure the Update Advisor
About Automatic Pull Requests
Enable Pull Requests for GitHub
Video: Enable Pull Requests for GitHub for Use in Agent-Based Scans
Enable Pull Requests for GitLab
Video: Enable Pull Requests for GitLab for Use in Agent-Based Scans
Understanding Automatic Pull Request Support
Configure Agent for Automatic Pull Requests
Video: Enable Update Advisor and Configure Agent for Automatic Pull Requests
Using Scan Directives for Agent-Based Scanning
Use the Latest CVSS Version in SCA Rules
Understanding Custom Rules for Agent-Based Scanning
Configure Organization Rules for Agent-Based Scanning
About Veracode SCA Agent JSON Schema
Using the Agent-Based Scanning CI Script
User Management
Using Teams with Agent-Based Scanning
Managing Users for Agent-Based Scanning
Finding and Fixing Vulnerabilities
About .NET SCA Agent-Based Scanning
About Java SCA Agent-Based Scanning
About JavaScript SCA Agent-Based Scanning
About Go SCA Agent-Based Scanning
About PHP SCA Agent-Based Scanning
About Python SCA Agent-Based Scanning
About Ruby SCA Agent-Based Scanning
About Scala SCA Agent-Based Scanning
About Kotlin SCA Agent-Based Scanning
About Swift SCA Agent-Based Scanning
About C/C++ SCA Agent-Based Scanning
Understanding the Agent-Based Scan Language Support Matrix
Scanning Containers with Agent-Based Scanning
Video: Scan a Container with Agent-Based Scanning
Issue Management
Issues Overview
Ignored Issues
Understanding SCA License Risk
Understanding Tags and Branches for SCA Agent-Based Scans
Export Agent-Based Scan Results
Libraries
View Library Details
Unmatched Libraries
Understanding Agent-Based Scanning Vulnerabilities
Download an Agent-Based Scan SCA Security Report
Creating and Deleting Workspaces
Project Management
Understanding Default Branches for Agent-Based Scan Projects
Change Default Branch for SCA Agent-Based Scans
Watching a Veracode SCA Project
Understanding Webhooks
View a Veracode SCA Project History
Delete a Veracode SCA Project
Generating a Software Bill of Materials (SBOM) for Agent-Based Scans
Upload and Scan
Using Veracode SCA Upload Scans
Video: Upload and Scan with Veracode Software Composition Analysis
Requesting a Veracode SCA Upload Scan
Understanding the Upload and Scan Language Support Matrix
Request the Static Scan and Configure Scan Options for Veracode SCA
Preparing Your Application for Veracode SCA Upload Scanning
Upload a Packaged Application for Veracode SCA
Understanding Prescan Verification for Veracode SCA Upload Scanning
Select Modules for Veracode SCA Upload Scanning
Start a Veracode SCA Upload Scan
Scan Statuses for Veracode SCA Upload Scans
Using Veracode SCA Upload Scan Results
Reviewing Your Application Portfolio with Veracode SCA
Meeting SCA Policy Compliance
Using Vulnerabilities Data with Veracode SCA
Include SCA Findings in Policy
Using Third-Party Components Data with Veracode SCA
Reviewing Veracode SCA License Data
Veracode SCA Legal Disclaimer
Using Application Data with Veracode SCA
About Veracode SCA Remediation Guidance
Mitigating Veracode SCA Vulnerabilities and Licenses
Address Veracode SCA Vulnerabilities
Mitigate License Risk with Veracode SCA
Approve or Reject Software Composition Analysis Mitigations
Using CVSS Versions
Export Veracode SCA Portfolio Results
Generating a Software Bill of Materials (SBOM) for Upload Scans

Back to home page