Static Analysis updates
The updates on this page apply to Veracode Static Application Security Testing (SAST). Updates that apply to specific Veracode regions show a region icon.
For language support specific to Veracode Pipeline Scan, see Pipeline Scan Supported Languages.
September 26, 2024
Updated language and framework support
.NET
- Improved cleanser detection for CWE-113
Android
- Initial support for Android 15
Go
- Enhanced Go AWS Lambda package support
iOS
- Enhanced support for iOS 17
- Improved CWE-259 and 798 flaw detection, resulting in a reduction in false positives
Java
- Improved scan performance
- Improved CWE-73 and 327 flaw detection
- Improved third-party detection
PHP
- Added Laravel Blade and Views support
PL/SQL
- Improved SQL parsing support
Ruby on Rails
- Rails 7.2 support
T-SQL
- Improved SQL parsing support
Other languages
- Improved CWE-259 and 798 flaw detection, resulting in a reduction in false positives for all languages
September 16, 2024
Updated language and framework support
iOS
- Initial support for iOS 18
Scan results for any iOS applications built with Xcode versions older than Xcode 15.3 may be degraded. Veracode recommends that iOS applications be built with Xcode 15.3 or later for best results
September 13, 2024
Updated language and framework support
iOS
Veracode has released version 0.5.0 of Gen IR, the iOS packaging tool, to GitHub and Homebrew. It includes the following new features and improvements:
-
Added
PIFSupport
library that integrates the Project Interchange Format (PIF) into Gen IR. This new library allows Veracode to better interact with project models from Xcode and SPM, offering a more structured and publicly documented alternative to PBXProject. With this change, Veracode can now discover and decode the PIF cache, which allows Gen IR to better parse and reason about complex project structures and dependencies between targets in a project. Benefits of this change include:- Simplified project parsing: PIF’s structure is easier to consume and more robust.
- Enhanced compatibility: improved handling of dependencies and other existing issues.
- Future-proofing: aligns with modern development tools and workflows in Xcode and SwiftPM.
-
Support for projects built or generated with Xcode 16.
If you need to downgrade to the previous version, use a new Homebrew formula:
- If you already have Gen IR installed:
brew install [email protected]
- If you do not have Gen IR installed:
brew install [email protected]
To upgrade your installed Gen IR to the new version, run brew update && brew upgrade