Integration updates RSS feed

Updates that apply to specific Veracode regions show a region icon. Veracode Greenlight is not supported in the European region.

For updates specific to Veracode Fix, such as language and CWE support, see Fix updates. For updates specific to the SCA integrations, see SCA updates.

September 16, 2026​

GitHub Workflow Integration v2.1.7 ​

This release adds the policy parameter to veracode.yml for infrastructure-as-code (IaC) scans.

Veracode Integration for Jira Server v5.0.2​

This update includes the following improvements:

• Adds support for Jira 11, including the required Java 21 and platform compatibility updates.
• Updates affected workflows and user interface components to improve compatibility and stability with Jira 11.3.10.

September 8, 2026​

GitHub Workflow Integration now supports Veracode Fix for SCA​

The GitHub Workflow Integration now generates fixes for vulnerable dependencies identified in Software Composition Analysis (SCA) scans. For more information, see GitHub Workflow Integration.

Veracode Fix for SCA is a Limited Availability (LA) release only available to specific Veracode customers.

September 7, 2026​

Veracode Scan for Visual Studio v0.8.2​

This update improves packaging.

August 26, 2026​

Veracode Scan for VS Code v1.16.3​

This release includes the following updates:

• Adds an option to change the region during OAuth authentication and displays the current or most recently used region. This option appears on the OAuth authentication screen below Authentication.
• Adds a Current File filter to Static Scan Findings, allowing you to view findings for the file currently open in the editor.
• Adds an option to filter and group Static Scan Findings by file name, with findings for each file grouped by severity.
• Updates the Static Findings Filter label to clearly display the applied filters.

August 25, 2026​

GitHub Workflow Integration v2.1.3​

This release includes the following updates:

• Adds support for custom predependency commands in the Veracode YAML file to prepare projects before scanning.
• Resolves an issue in which pipeline scans could fail unexpectedly when vulnerabilities are mitigated or build-failure settings are disabled.

August 24, 2026​

Veracode Integration for Jira Cloud v5.0.0​

This release upgrades the integration and its dependencies to improve security, performance, compatibility, and long-term platform support. This release does not include functional changes.

August 19, 2026​

Azure DevOps Workflow Integration v2.4.3​

This release adds support for a custom agent pool name parameter in veracode.yml that lets you specify the agent pool to use for pipeline execution.

August 10, 2026​

Veracode Scan for Visual Studio v0.8.1​

This update includes the following improvements:

• Resolves an issue that could cause the interface to freeze.
• Resolves issues with loading indicators to provide accurate status information during transitions.
• Resolves an issue with the Logout Enable or Disable toggle to ensure that it works as expected.
• Improves diagnostic logging to help Veracode Support investigate issues.

August 6, 2026​

GitHub Workflow Integration v2.1.2​

This release mitigates an issue in which the GitHub API does not update or reflect the correct check run status. Until GitHub permanently resolves the issue, this update includes a retry mechanism for updating checks, allowing you to merge your pull requests without being blocked.

July 30, 2026​

End of support for Jira 9 in the Veracode Integration for Jira​

On November 30, 2026, Veracode will end support for the Veracode Integration for Jira on Jira Server and Jira Data Center 9.x. To continue using a supported version of the integration, upgrade to Jira 10 or later before this date.

Veracode Integration for Jira Server v4.17.0 and v4.17.1​

These updates improve scheduled flaw import performance by optimizing application lookup operations.

GitHub Workflow Integration v2.1.1​

Updated default runner image

This release includes an updated default runner image scm-packaging-5.0.0 with improved packaging capabilities. The following components have been updated:

• Alpine v3.24.0
• Ubuntu v26.04
• .NET v10
• PipEnv v2026.6.2
• libicu v78
• Node.js v22.22.1
• Python v3.14.4

New uninstallation workflow

You can now uninstall the Veracode app from your GitHub organizations using a new uninstallation workflow on the Veracode Platform.

July 7, 2026​

Veracode Azure DevOps extension v3.35.0​

This release updates the extension for compatibility with a future Microsoft TFX packaging library upgrade. The Veracode Flaw Importer task, which contains spaces in the task name, is now deprecated and replaced by the VeracodeFlawImporter task. Both tasks are currently supported, but the deprecated task is scheduled for removal in a future release.

June 30, 2026​

GitHub Workflow Integration v2.0.0​

Install and update the integration from the Veracode Platform

You can now install and configure the Veracode GitHub Integration directly from the Veracode Platform, eliminating the manual steps required for GitHub Marketplace installation. You can also update integration credentials from the Veracode Platform.

If you previously installed the integration through the GitHub Marketplace for one or more organizations, you can use the Veracode Platform to install it for additional organizations.

You can update credentials for all organizations from the Veracode Platform, regardless of whether you installed the integration through the platform or the marketplace. You can still install and configure the integration through the GitHub Marketplace.

We also added autopackaging support for Apex, VB6, and Perl.

Configure scan schedules from the Veracode Platform

You can schedule Static Analysis, Software Composition Analysis (SCA), and Infrastructure as Code (IaC) scans for organizations where the Veracode GitHub Integration is installed through the Veracode Platform or the GitHub Marketplace.

June 29, 2026​

Veracode Scan for JetBrains v1.8.0​

This update includes usage analytics to provide insights into plugin adoption, feature usage, and scan activity.

June 24, 2026​

Veracode Scan for VS Code v1.16.1​

This update includes the following improvements:

• Upgrades the SCA Scan Agent to v3.8.116 to improve dependency processing for some NPM projects, prevent scan timeouts, and improve scan reliability for large or complex dependencies.
• Resolves an issue where notifications appeared multiple times when searching for a project in the Flaws search field.
• Improves Auto SCA stability with bug fixes that provide a more reliable scanning experience.

June 18, 2026​

Veracode Static for Eclipse 3.10.0​

This release fixes a scrollbar issue in the TSRV Mitigation dialog to improve navigation and accessibility for long content.

June 15, 2026​

Permissions are downgraded for GitHub Veracode Workflow App​

The GitHub Veracode Workflow App no longer has administration permissions to ensure that the application cannot alter or remove the repositories where it is installed.

June 09, 2026​

GitHub Workflow Integration v1.1.6​

This release updates GitHub Actions to use Node.js 24 instead of the deprecated Node.js 20.

June 05, 2026​

Azure DevOps Workflow Integration v2.4.2 ​

This release resolves an issue where pipelines are not created for certain projects in ADO workflows. It also resolves a bug that causes policy scans to fail even after findings are marked as mitigated.

May 27, 2026​

Veracode Scan for Visual Studio v0.8.0​

This update includes the following improvements:

• Adds usage analytics to provide insights into plugin adoption, feature usage, and scan activity.
• Adds a Scan Scope setting that lets you scan the full project directory or only the active solution for faster, more focused results.
• Improves MSBuild detection to package .NET Framework applications more reliably.

April 30, 2026​

Veracode Integration for Jira Cloud v4.23.0​

This update improves Jira Cloud component synchronization by retrieving all project components across paginated results.

April 23, 2026​

Azure DevOps Workflow Integration v2.3.10​

If you specify a value for analysis_branch in veracode.yml, scheduled scans now run for that analysis branch instead of the default branch.

April 22, 2026​

Veracode Scan for JetBrains v1.6.3​

This update includes the following improvements:

• Updates the list of programming languages and file extensions supported by Veracode Fix.
• Improves overall IDE performance.

April 21, 2026​

Veracode Scan for VS Code v1.16.0​

This update includes usage analytics to provide insights into plugin adoption, feature usage, and scan activity.

April 15, 2026​

Veracode Integration for Jira Cloud v4.22.0​

This update includes the following improvements:

• Fixes conflicts that occur when one scan type is in progress while another scan type completes and publishes results.
• Improves the reliability of application retrieval APIs by adding retry logic and upgrading the Java wrapper. This change also addresses multiple critical and high‑severity security vulnerabilities.
• Prevents unexpected sandbox closures caused by null values in a map. Sandboxes filtered by modified date are no longer incorrectly treated as deleted.

GitLab Workflow Integration v2.1.7​

This release includes the following improvements:

• Resolves issues that occurred when SCA scans were done on Python projects.
• Disallows duplicate scans being triggered when merge requests are merged with delete_source_branch selected.

April 14, 2026​

Veracode Scan for Visual Studio v0.7.3​

This release updates the list of programming languages and file extensions supported by Veracode Fix.

April 13, 2026​

Azure DevOps Workflow Integration v2.3.9​

You can now schedule scans for every organization in which the Azure DevOps Workflow Integration is installed. This feature is based on the configurations specified in the veracode.yml file. For more details, see Schedule scans in Azure DevOps.

March 23, 2026​

Veracode Scan for VS Code v1.15.3​

This release updates the list of programming languages and file extensions supported by Veracode Fix.

March 18, 2026​

Java API Wrapper v26.3.19.0​

This release includes the following improvements:

• Adds page size support to the Platform Applications API (/appsec/v1/applications) to improve efficiency when retrieving large application lists.
• Introduces support for the Veracode Platform paginated Sandbox REST API, which enables retrieval of sandbox lists using pagination.

March 12, 2026​

Veracode Scan for Visual Studio v0.7.2​

This update includes the following improvements:

• Adds support for Visual Studio 2026.
• Fix recommendations provide a single best option instead of multiple options in a dropdown.

March 09, 2026​

Veracode Scan for JetBrains v1.6.2​

This release resolves an issue that caused the plugin to stop functioning when the project path contained spaces. The plugin now loads correctly and scans projects with spaces in their directory paths.

March 05, 2026​

Veracode Azure DevOps extension v3.34.0​

This update includes the following improvements:

• Improves exception handling to better manage outage scenarios and enhance system resilience.
• Upgrades the Java Wrapper to version 26.2.18.0.

Veracode Integration for Jira Server v4.16.0 and v4.16.1​

This update includes the following improvements:

• Adds automatic retry handling for transient platform or network interruptions on safe API calls to improve reliability.
• Increases the read timeout for API calls to the Veracode Platform.

February 24, 2026​

Veracode Scan for VS Code v1.15.2​

This update includes the following improvements:

• Fix recommendations provide one best option instead of a multi‑option dropdown.
• Veracode Fix includes usability improvements for .NET projects.
• Uses the updated SCA service URLs instead of the legacy SourceClear URL.

February 16, 2026​

Azure DevOps Workflow Integration v2.3.6​

This release provides the debug configuration option in the veracode.yml file for debugging and troubleshooting.

February 10, 2026​

Java API Wrapper v26.2.18.0​

This release includes the following improvements:

• Implements a configurable retry mechanism for the Veracode Platform Applications API (appsec/v1/applications) to improve handling of transient failures, timeouts, and intermittent network issues.
• Adds support for the Veracode Platform Findings REST API to access open and mitigated application findings.

February 5, 2026​

GitHub Workflow Integration v1.0.6​

This release provides the debug configuration option in the veracode.yml file for debugging and troubleshooting.

January 29, 2026​

GitLab Workflow Integration v2.1.4​

This release includes the following improvements:

• Provides the debug configuration option in the veracode.yml file for debugging and troubleshooting.
• Resolves issues related to the manual uninstallation of the GitLab Workflow Integration.

January 22, 2026​

Veracode Scan for JetBrains v1.6.1​

This update includes the following improvements:

• Improves telemetry logging through expanded event analytics.
• Updates the SCA agent to the latest version.
• Resolves an issue that causes OAuth logout failures when multiple IDE windows are open.

January 21, 2026​

Veracode Scan for Eclipse v1.4.1​

This update includes the following improvements:

• Improves telemetry logging through expanded event analytics.
• Updates the SCA agent to the latest version.
• Resolves an issue that causes OAuth logout failures when multiple IDE windows are open.

January 16, 2026​

Azure DevOps Workflow Integration v2.3.3​

This update ensures that when custom policies are applied in the Veracode Platform with the Build Action: error configuration for an SCA agent-based scan, the SCA scan fails when vulnerabilities are found.

January 15, 2026​

Veracode Integration for Jira Cloud v4.21.0​

This update includes the following improvements:

• Refines retry behavior to respect Atlassian’s recommended backoff timing.
• Strengthens HTTP connection management and enforces request timeouts.
• Expands request tracing and logging to simplify diagnosing throttling and network issues.

January 14, 2026​

Veracode Scan for Visual Studio v0.7.1​

This update includes the following improvements:

• Introduces a structured event model for Veracode scan processes in Visual Studio. This model captures additional IDE, project, and scan metadata to support more reliable analytics.
• Improves telemetry logging by refining event data collection, providing better visibility into IDE activity and scan performance.

December 18, 2025​

Veracode Scan for VS Code v1.15.1​

This update includes the following improvements:

• Adds a structured IDE scan process that sends detailed telemetry events.
• Collects additional IDE, project, and scan metadata to improve analytics reliability.

December 11, 2025​

Veracode Scan for Visual Studio v0.7.0​

This update includes the following improvements:

• Imports static scan results from the Veracode Platform directly into the IDE.
• Proposes mitigations for static scan flaws directly within the IDE.

December 10, 2025​

Azure DevOps Workflow Integration v2.3.0​

This update ensures that any findings marked as mitigated on the platform are excluded from pipeline scan results.

November 25, 2025​

GitHub Workflow Integration v1.0.3​

This update adds support for Windows-based runners when using the GitHub workflow integration.

November 18, 2025​

Java API Wrapper v25.11.17.0​

This update removes INI credentials loader dependency to address a critical security vulnerability and improve case-insensitive credential loading.

Veracode Scan for JetBrains v1.6.0​

This update includes the following improvements:

• Imports static scan results from the Veracode Platform directly into the IDE.
• Proposes mitigations for static scan flaws directly within the IDE.

October 29, 2025​

GitHub Workflow Integration v1.0.2​

This update resolves an issue that prevented scans from being triggered when the actions section was added to the veracode.yml file.

October 24, 2025​

Veracode TeamCity Plugin v3.0.0​

This update adds support for TeamCity Cloud.

October 23, 2025​

Veracode Azure DevOps extension v3.33.0​

This update includes the following improvements:

• Adds support for Node.js version 20.
• Improves the Azure DevOps flaw importer to increase the accuracy of imported flaw data.
• Reduces manual effort by automatically updating flaw statuses and severities.
• Enables automatic closure of work items for remediated SCA vulnerabilities.
• Updates severity tags for flaws imported into Azure DevOps.

Important note for upgrading to Azure DevOps extension v3.33.0​

This release includes automated tagging for SCA work items, which enables automatic closure when findings are remediated.

First run after upgrade

• Tags and tracks work items for active SCA findings.
• Does not tag work items for previously remediated findings because the platform no longer reports them.
• Requires manually closing untagged work items.

Subsequent runs

• Tags all SCA work items.
• Automatically closes work items when findings are remediated.

Additional details

• Updates the Severity tag and Severity field only when the value changes.
• For Agile projects, updates apply only to the Bug work item type because other work item types do not include the Severity field.
• For custom templates, add the Severity field to the work item for updates to apply.

Recommended action:

After the first flaw import run using v3.33.0, review and manually close any SCA work items that were remediated before the upgrade.

October 14, 2025​

Veracode Integration for Jira Cloud v4.20.0​

This update includes the following improvements:

• Improves performance by replacing the legacy XML API with the paginated and consistent REST API.
• Enhances stability by handling null values in custom fields to prevent job failures.

October 09, 2025​

Veracode Scan for Visual Studio v0.6.0​

This update adds support for OAuth-based authentication in the extension. You can now authenticate securely with Veracode from your IDE using Single Sign-On (SSO) and OAuth.

October 6, 2025​

GitHub Workflow Integration v0.2.24 ​

This release resolves an issue that caused Static and SCA scans to fail due to GitHub Actions template errors.

September 25, 2025​

Veracode Integration for Jira Server v4.14.0​

This update includes the following improvements:

• Adds support for sending email notifications when an import fails, using your Jira SMTP server configuration.
• Resolves an issue that caused unexpected sandbox closures due to a null value in the map.
• Fixes a bug where sandboxes filtered by modified date were incorrectly marked as deleted, resulting in unintended closures.
• Improves handling of null values during case matching to prevent failures when creating issues.
• Addresses three high-severity security vulnerabilities.

Veracode Scan for VS Code v1.15.0​

This update adds support for OAuth-based authentication in the extension. You can authenticate securely with Veracode from your IDE using single sign-on (SSO) and OAuth.

September 22, 2025​

GitHub Workflow Integration v0.2.23​

This update includes the following improvements:

• Mitigated findings do not block new pipeline scans.
• When a new policy or sandbox scan is triggered on a branch that is already running these scans, the earlier scans are deleted.
• Pipeline scans display the correct check run status in GitHub.

September 11, 2025​

GitHub Workflow Integration v0.2.22​

This release resolves an issue where IaC and SCA scans could hang.

September 8, 2025​

Azure DevOps Workflow Integration v2.2.5​

This update resolves an issue in Azure DevOps where Veracode pipelines failed when branch policies triggered duplicate events.

September 05, 2025​

New learning path for Veracode Scan for JetBrains​

Learn how to set up and use Veracode Scan for JetBrains to scan and secure your projects. See the learning path Scan and fix in your IDE.

September 03, 2025​

Veracode Scan for Eclipse v1.4.0​

This update adds support for OAuth-based authentication in the plugin. You can now authenticate securely with Veracode from your IDE using Single Sign-On (SSO) and OAuth.

Veracode TeamCity Plugin v3.0.0​

This update upgrades the Java Wrapper to version 24.10.15.0 for the TeamCity plugin.

September 02, 2025​

Veracode Integration for Jira Cloud v4.19.0​

This update includes the following improvements:

• Replaces the deprecated Atlassian search API with the JQL search API.
• Resolves the high-severity vulnerability in Apache Commons.

August 25, 2025​

Veracode Azure DevOps Extension v3.32.0​

This update includes the following improvements:

• Ensures builds fail when credentials are missing, invalid, or incorrect, regardless of the failBuildIfUploadAndScanBuildStepFails parameter.
• Updates extension logos to reflect Veracode rebranding.
• Upgrades the Java wrapper to version 24.10.15.0.

August 20, 2025​

Azure DevOps Workflow Integration v2.2.4 ​

This update resolves the issue of policy and sandbox scans getting held at the module selection step in the Commercial region and European region.

August 12, 2025​

GitLab Workflow Integration v2.0.3​

This release resolves bugs related to visibility of groups, and improves debug logs for troubleshooting.

August 4, 2025​

Java API Wrapper v25.8.16.0​

This update resolves a high-risk vulnerability in the ini4j library (version 0.5.4).

July 29, 2025​

Veracode Static for Visual Studio v1.14.0​

This update includes the following improvements:

• Fixes medium-severity vulnerabilities.
• Improves visuals to reflect the rebranding.

July 23, 2025​

Veracode Scan for JetBrains v1.5.2​

This update improves logging.

July 17, 2025​

Veracode Scan for VS Code v1.14.3​

This update improves logging for SCA scans.

July 11, 2025​

Veracode Scan for JetBrains v1.5.1​

This update includes the following improvements:

• Fixes are now applied successfully even when the user's root folder path contains spaces.
• The getFixes function is no longer called if a fix is unavailable for a flaw.
• Resolved an issue where the scan status was displayed incorrectly for multi-module projects.

July 09, 2025​

MSBuild support for Azure DevOps Workflow Integration v2.2.2 ​

This update includes bug fixes and support for .NET projects that require MSBuild for the Azure DevOps Workflow Integration in the Commercial region and European region.

July 02, 2025​

New learning path for Veracode Scan for Eclipse​

Learn how to set up and use Veracode Scan for Eclipse to scan and secure your projects. See the learning path Scan and fix in your IDE.

July 01, 2025​

Veracode Integration for Jira Server v4.13.0​

This update includes security enhancements and bug fixes.

June 30, 2025​

Veracode Scan for Visual Studio v0.5.0​

This update reduces the number of JavaScript artifacts generated when your project contains files with the following extensions:

• .json
• .map
• .yaml
• .yml
• .lock
• .css

June 24, 2025​

Veracode Scan for JetBrains v1.5.0​

Added support for OAuth-based authentication in the plugin. You can now authenticate securely with Veracode from your IDE using Single Sign-On (SSO) and OAuth.

June 18, 2025​

Veracode Scan for Visual Studio v0.4.9​

This update achieves feature parity with the Veracode Scan extension for Visual Studio 2019, providing a consistent scanning experience across supported Visual Studio versions.

June 17, 2025​

Veracode Scan for VS Code v1.14.1​

This update includes the following improvements:

• Files in node_modules are now excluded from scan searches
• Added error logging for SCA agent downloads
• Custom error messages are now shown when no supported package manager or build system is detected during SCA agent scans
• You can now search application profiles directly within the IDE
• Paging is now supported to ensure all flaws are fetched during scans

June 10, 2025​

Veracode Jenkins Plugin 25.6.25.0​

This update includes security fixes.

June 09, 2025​

Veracode Scan for JetBrains v1.4.9​

This update includes the following improvements:

• Enhanced Veracode Fix support in the IDE
• More accurate flaw-to-source mapping

May 29, 2025​

Veracode Scan for VS Code v1.14.0​

This update includes the following improvements:

• Import static scan results from the Veracode Platform directly into the IDE
• Propose mitigations for static scan flaws directly within the IDE

Veracode Integration for Jira Server v4.12.0​

This update includes the following improvements:

• Improved logging to provide more accurate status updates during import operations, making troubleshooting easier.
• Enhanced performance for faster and more reliable operation.
• Fixed Software Composition Analysis (SCA) vulnerabilities to strengthen security.

May 28, 2025​

Veracode Scan for Visual Studio 2022 v0.4.8​

This update includes the following improvements:

• Fixed an issue that prevented the Veracode Fix indicator from displaying for static flaws with available file references
• Improved logging capabilities
• Signed the extension for enhanced security and trust

May 20, 2025​

Windows Runner support for Azure DevOps Workflow Integration v2.2.1 ​

This update provides Windows Runner support for the Azure DevOps Workflow Integration in the Commercial region and European region.

May 9, 2025​

GitLab Workflow Integration​

Veracode has released the GitLab Workflow Integration that allows you to scan your GitLab repositories with Static Analysis, Software Composition Analysis (SCA) and Infrastructure as Code (IaC).

GitLab Workflow Integration has the following capabilities:

• Automates scans for thousands of repositories from a location.
• Allows Static, SCA, and IaC scans in a single workflow.
• Eliminates the need to configure workflows for individual repositories.
• Supports autopackaging for Java, .NET, JavaScript, and Python repositories.

To get access to GitLab Workflow Integration, contact Veracode Technical Support.

This integration is currently available only for GitLab.com and is not compatible with self-hosted GitLab instances. For installation and usage instructions, view the Veracode documentation.

May 08, 2025​

Veracode Scan for Eclipse v1.3.5​

This update includes the following improvements:

• Skip the vulnerable method analysis during scans in your IDE.
• The SCA agent now downloads from Sca-downloads.veracode.com instead of Download.sourceclear.com.
• Veracode Fix now suggests fixes for flaws in COBOL projects.
• Veracode Fix now generates suggestions for flaws identified in JSP files.

April 28, 2025​

Veracode Static for Visual Studio v1.13.0​

This update includes the following improvements:

• Updated the interface to display the new Veracode logo.
• Fixed issues related to SCA vulnerabilities.

April 24, 2025​

Azure DevOps Workflow Integration v2.1.0 ​

This update makes the revamped Azure DevOps Workflow Integration available in the European region.

April 21, 2025​

Veracode Scan for JetBrains v1.4.8​

This update includes the following improvements:

• Added a null check to improve reliability during the module selection process.
• Added an option to skip vulnerable method analysis during SCA scans.

April 3, 2025​

Azure DevOps Workflow Integration revamp v2.0.0​

The revised and upgraded Azure DevOps Workflow Integration has the following capabilities:

• Automates scans for thousands of repositories from a location.
• Allows Static, SCA, and infrastructure as code (IaC) scans in a single workflow.
• Eliminates the need to configure workflows for individual repositories.
• Supports autopackaging for Java, .NET, JavaScript, Python, Go, Kotlin, and React Native repositories.

To get access to the integration, contact Veracode Technical Support.

For information on installing and scanning with the integration, view the Veracode documentation.

March 24, 2025​

Veracode Static for IntelliJ v3.7.1​

This version adds the new Veracode logo to the interface.

March 18, 2025​

Veracode Scan for Visual Studio 2022 v0.4.7​

This update includes the following improvements:

• Increased the timeout duration for receiving Veracode Fix suggestions.
• .NET project solution files now support Veracode Fix when Git references are missing.

March 17, 2025​

Veracode Scan for Eclipse v1.3.2​

This update includes the following improvements:

• Veracode Fix now suggests fixes for flaws in C++ projects.
• Enhanced Veracode Fix suggestion support for Go projects.
• Improved logic for matching flaws with code in the editor.
• Veracode Analytics in the Veracode Platform now tracks Veracode Fix usage from scans in the plugin.
• Veracode Fix now reports fixes for flaws in .tsx and .jsx files (JavaScript file extensions).
• Removed support for scanning Perl artifacts because they are not supported by the Veracode Pipeline Scan.

Veracode Jenkins Plugin 25.3.24.0​

This update adds optional Veracode Jenkins Plugin script parameters for the Upload and Scan action in the plugin.

March 04, 2025​

Veracode Scan for VS Code v1.13.5​

This update includes the following improvements:

• Veracode Fix now suggests fixes for flaws in C++ projects.
• Enhanced Veracode Fix suggestion support for Go projects.
• Improved logic for matching flaws with code in the editor.
• Veracode Analytics in the Veracode Platform now tracks Veracode Fix usage from scans in the extension.

February 27, 2025​

Veracode Scan for JetBrains v1.4.7​

This update includes the following improvements:

• Veracode Fix now suggests fixes for flaws in C++ projects.
• Enhanced Veracode Fix suggestion support for Go projects.
• Exclude non-project files from scanning within the same IDE session.
• Improved logic for matching flaws with code in the editor.
• Veracode Analytics in the Veracode Platform now tracks Veracode Fix usage from scans in the plugin.

Veracode Scan for Visual Studio 2022 v0.4.4​

This update includes the following improvements:

• Veracode Fix now suggests fixes for flaws in C++ projects.
• Enhanced Veracode Fix suggestion support for Go projects.
• Improved logic for matching flaws with code in the editor.
• Veracode Analytics in the Veracode Platform now tracks Veracode Fix usage from scans in the extension.

February 24, 2025​

C# API wrapper v25.2.10.2​

This update includes the following improvements:

• Now supports updating a Git repository URL for an application profile in the C# API wrapper.
• Added the failbuild parameter, which fails the build if an artifact of the packaged application fails to upload.
• Security fixes related to cryptographic issues.
• Replaced deprecated XML APIs with REST equivalents in C# wrappers.

February 18, 2025​

Veracode Static for IntelliJ v3.7.0​

This update adds support for the new interface introduced in IntelliJ IDEA 2022.3.

February 06, 2025​

Veracode Scan for JetBrains v1.4.6​

This update improves the interface to correctly display the Veracode logo.

Veracode Scan for Visual Studio 2022 v0.4.3​

This update improves the interface to correctly display the Veracode logo.

January 31, 2025​

Veracode Scan IDE integrations rebrand​

Veracode has rebranded the following IDE extensions and plugins:

• Veracode Scan for VS Code v1.13.4
• Veracode Scan for JetBrains v1.4.5
• Veracode Scan for Visual Studio 2022 v0.4.2
• Veracode Scan for Eclipse v1.3.1

January 21, 2025​

Veracode Scan for JetBrains v1.4.4​

This update adds support for selection from multiple modules.

January 16, 2025​

Veracode Scan for Visual Studio v0.4.1​

This update includes the following improvements:

• Usability improvements related to running scans and applying suggested fixes.
• Automatic detection of msbuild ensures that the autopackager reliably packages .NET Framework applications.

January 15, 2025​

Veracode Integration for Jira Server v4.11.0​

This update adds support for Jira version 10.

January 10, 2025​

New learning path for Veracode Scan for VS Code​

To learn how to set up and use Veracode Scan for VS Code to scan and secure your projects, see the new learning path Scan and fix in your IDE.

January 09, 2025​

Veracode Scan for VS Code v1.13.3​

This update improves the SCA Features.Policy setting for User settings. When you select a policy, the selected policy now persists across all instances (windows) of VS Code.

December 19, 2024​

Veracode Workflow App v0.2.16 for GitHub​

This update includes the following improvements:

• Fixes GitHub issue creation and code scanning alerts.
• Supports scanning of multiple artifacts in Veracode Pipeline Scan.

December 18, 2024​

Veracode Scan for VS Code v1.13.1​

This update includes the following improvements:

• Adds auto SCA scanning. Turn on this option to automatically scan all open-source libraries when you open a project or when the libraries change.
• After you run an SCA scan, the extension now highlights vulnerable libraries in the package manager file for projects that use Maven, npm, or Yarn.

December 13, 2024​

Veracode TeamCity Plugin v2.8.0​

This update includes the following improvements:

• Added the Optional Argument field. You can now enter optional parameters for Optional Argument in the Upload and Scan task.
• Minor security improvements.

December 12, 2024​

Veracode Workflow App v0.2.15 for GitHub​

This update includes the following improvements:

• Fixes Pipeline Scan errors caused by an application profile override or an invalid profile.
• Fixes issues due to the workflow app including helper files as build artifacts.

Veracode Scan for VS Code v1.12.0​

This update adds an option to skip vulnerable method analysis during SCA scans. When turned on, this option can reduce SCA scan times, but the scans will not detect vulnerable methods in open source libraries.

December 10, 2024​

Veracode Scan for Visual Studio v0.4.0​

This update adds proxy support. You can now sign in to Veracode through a proxy server.

November 28, 2024​

Azure DevOps Workflow Integration v1.3.0 ​

This update makes Azure DevOps Workflow Integration available in the European region.

November 26, 2024​

Veracode Fix Action for GitHub v1.0.1​

This update includes the following improvements:

• Additional CWE support for single fix and batch fix.
• Removed restriction of using app as the root folder name in the user codebase.

November 25, 2024​

Veracode Scan for VS Code v1.11.7​

This update improves the suggested fixes from Veracode Fix.

November 20, 2024​

Veracode Scan for Eclipse v1.3.0​

This update adds proxy support. You can now sign in to Veracode through a proxy server.

November 18, 2024​

Veracode Scan for Visual Studio v0.3.2​

This update includes minor performance improvements.

November 14, 2024​

Veracode Scan for VS Code v1.11.6​

This update includes the following improvements:

• The autopackager has improved support for Go.
• Improved suggested fixes from Veracode Fix.

November 13, 2024​

Veracode Azure DevOps Extension v3.29.0​

This update includes minor security improvements.

October 25, 2024​

Veracode Scan for JetBrains v1.4.3​

This update includes minor usability improvements.

Veracode Scan for Visual Studio v0.3.1​

This update includes minor performance improvements.

Veracode Scan for VS Code v1.11.5​

This update includes minor performance improvements.

October 24, 2024​

Veracode Scan for Eclipse v1.2.1​

This update includes usability improvements.

October 15, 2024​

Veracode Scan for Visual Studio v0.3.0​

This update adds Software Composition Analysis (SCA) scans to Veracode Scan for Visual Studio. You can now find and fix vulnerabilities in open-source libraries, and review the risk level of the library licenses in your projects.

Veracode Integration for Jira Server v4.10.1​

This update fixes an issue where non-admin users are not able to select the Veracode link in tickets on Jira 9.12 or later.

Veracode Integration for Jira Server v4.10.0​

This update fixes an issue where non-admin users are not able to select the Veracode link in tickets on Jira 9.12 or earlier.

October 10, 2024​

Veracode Fix Action for Github 1.0.0​

This update adds Veracode Fix as a GitHub Action. You can use this GitHub Action to review and apply suggested code fixes to flaws in your GitHub project before merging your commits to the main branch.

October 08, 2024​

Java API wrapper 24.10.15.0​

This update adds the repourl parameter. This parameter updates the Git repo URL for the associated application profile.

September 30, 2024​

Veracode Scan for Eclipse 1.2.0​

This update adds Veracode Software Composition Analysis (SCA) scanning to Veracode Scan for Eclipse.

September 26, 2024​

Veracode Scan for Eclipse v1.1.0​

This update adds Veracode Fix to Veracode Scan for Eclipse. To fix flaws in seconds from within your IDE, you can now apply AI-generated fixes directly to flaws. The plugin name has changed from Veracode SAST for Eclipse IDE to Veracode Scan for Eclipse.

Veracode Scan for Visual Studio v0.2.0​

This update adds Veracode Fix to Veracode Scan for Visual Studio. To fix flaws in seconds from within your IDE, you can now apply AI-generated fixes directly to flaws.

September 24, 2024​

Introducing Veracode Scan for Visual Studio v0.1.0​

Veracode Scan for Visual Studio is an extension that integrates Static Application Security Testing (SAST) with Visual Studio 2019 and 2022. From within your IDE you can:

• Use autopackaging to have the plugin automatically package your code into a supported artifact for Static Analysis. Or, provide an artifact you packaged manually.
• Scan your projects to find security flaws in your code.
• Use the detailed scan results to learn about the flaws, prioritize which flaws to resolve first, and use the provided remediation guidance to fix the flaws.

September 17, 2024​

Veracode Integration for Azure DevOps v3.28.0​

This update includes minor security improvements.

September 16, 2024​

Veracode Integration for Jira Cloud v4.17.0​

This update includes minor performance improvements.

September 12, 2024​

Veracode Workflow App 0.2.13 for GitHub​

This update adds new user configurations to autopackaging that allow you to use your own runner, image, and dependencies for building your projects. The new configurations include:

• actions:ruby:version: Ruby version required in the project.
• actions:ruby:bundle: specific bundler required for the gem installation in a Ruby project.
• actions:{scan type}:build:runs_on: runner for building your project.
• actions:{scan type}:build:packager_image: a public docker image to use for building your project.
• actions:{scan type}:build:predependency_command: any additional commands required by the project.

For more details, see the complete list of veracode.yml configurations.

To update your app to reflect these changes, you must import the app repository.

View GitHub workflow data in the Veracode Platform ​

You can now connect your GitHub organizations to your Veracode account in the Veracode Platform in the Commercial region. This feature allows you to review GitHub workflow status and scan activity for all GitHub organizations in which you have installed the Veracode Workflow App.

This feature is not required and does not impact the existing functionality of the Veracode Workflow App.

September 9, 2024​

Introducing Veracode SAST for Eclipse IDE v1.0.0​

Veracode SAST for Eclipse IDE is a plugin that integrates Static Application Security Testing (SAST) with the Eclipse IDE. From within your IDE you can:

• Use autopackaging to have the plugin automatically package your code into a supported artifact for Static Analysis. Or, provide an artifact you packaged manually.
• Scan your projects to find security flaws in your code.
• Use the detailed scan results to learn about the flaws, prioritize which flaws to resolve first, and use the provided remediation guidance to fix the flaws.

September 6, 2024​

Azure DevOps Workflow Integration ​

Veracode has released the Azure DevOps Workflow Integration that allows you to scan your Azure Devops repositories with Static Analysis and Software Composition Analysis (SCA) in the Commercial region. The integration uses template workflows in a centralized location that you can apply to all repositories across your organization.

The functionality of the integration includes:

• Automated scans of up to thousands of repositories from one location
• Static, SCA, and infrastructure as code (IaC) scans start on developer activity from a single workflow
• Automated scanning does not require developers to configure workflows for individual repositories
• Autopackaging support for Java, .NET, JavaScript, Python, Go, Kotlin, and React Native repositories.

To get access to the integration, contact Veracode Technical Support.

For information on installing and scanning with the integration, view the Veracode documentation.

September 3, 2024​

Veracode Integration for Jira Server 4.9.1​

This update adds security improvements.

August 29, 2024​

Veracode Scan for VS Code 1.11.2​

This update improves Veracode Fix to only provide suggested fixes for flaws with supported CWE IDs.

August 28, 2024​

Veracode Scan for VS Code 1.11.1​

This update improves the data path step links on the Remediation Guidance tab.

August 16, 2024​

Veracode Scan for JetBrains 1.3.1​

This update includes the following improvements:

• Veracode Fix only provides suggested fixes for flaws with supported CWE IDs.
• To use autopackaging in Rider on macOS, you no longer need to open the IDE from a command prompt.

July 31, 2024​

Veracode Integration for Jira Server 4.8.1​

This update adds support for Jira Server and Jira Data Center v9.17.1.

Veracode Scan for VS Code 1.11.0​

This update improves the integrated autopackager.

July 24, 2024​

Veracode Scan for VS Code 1.10.0​

This update includes the following improvements:

• You can now cancel scans.
• Improved the recommended fixes for vulnerabilities in your libraries.

July 23, 2024​

Veracode Workflow App 0.2.7 for GitHub​

This update adds autopackaging support for JavaScript, Python, Go, Scala, Kotlin, React Native, and Android repositories.

To update your app to reflect these changes, you must import the app repository.

July 18, 2024​

Veracode Scan for JetBrains 1.2.0​

This update includes the following improvements:

• You can now sign in to Veracode through a proxy server.
• All debug logs are now under the .veracode folder.
• The Scan Project button is now turned on after you install and set up the extension.
• Vulnerable libraries are now sorted by usage.
• Panels are now cleared after you start a new scan.
• Minor performance improvements.

July 10, 2024​

Java API Wrapper 24.7.14.0​

This update adds the failbuild parameter. You use this parameter to fail the build if any artifacts of your packaged applications fail to upload.

July 9, 2024​

Veracode Integration for Jira Cloud 4.15.0​

This update includes the following improvements:

• The Monitoring and Troubleshooting page now successfully displays remarks if an import fails.
• Projects with more than 50 components now import successfully.

June 28, 2024​

Veracode Workflow App 0.2.3 for GitHub​

This update includes the following improvements:

• Autopackager support for .NET repositories.
• The names of GitHub check runs for Veracode Static Analysis now indicate whether they are pipeline scans or policy scans.
• The GitHub check run summary pages now display the Veracode Platform URL. You can review results regardless of the check run status. Previously, the URL only appeared after the check run succeeded.

If you have not previously granted the app permissions to your GitHub repository, you might receive a notification requesting those permissions when you update your app.

To update your app to reflect these changes, you must import the app repository.

June 24, 2024​

Veracode Scan for JetBrains 1.1.0​

This update includes the following improvements:

• Adds Veracode Fix to Veracode Scan for JetBrains. To fix flaws in seconds from within your IDE, you can now apply AI-generated fixes directly to flaws.
• Adds support for the JetBrains Rider IDE.

June 6, 2024​

Veracode Workflow App 0.2.2 for GitHub​

This update includes the following improvements:

• Upgraded GitHub Actions artifacts to version 4.
• Autopackaging of Java repositories that do not contain build files in the root directory.
• Improved memory handling.

To update your app to reflect these changes, you must import the app repository.

Veracode for JetBrains 1.0.0​

This update includes the following improvements:

• You can now run Static Analysis (SAST) scans to find flaws in your source code. Before scanning, the plugin autopackages your code according to Veracode packaging requirements.
• Use the filtering options to focus on the static findings that are most important to your organization.
• Use the provided remediation guidance to fix static findings or use the ignore option to ignore findings you won't fix.

May 30, 2024​

Veracode Scan for VS Code 1.9.2​

This update includes the following improvements:

• The proxy support option is now generally available.
• The timeout limit for Static Analysis scans has increased to 60 minutes.

Veracode Azure DevOps Extension 3.27.2​

This update adds support for Node 10 and Node 16.

May 21, 2024​

Veracode Scan for VS Code 1.9.1 - Pre-release​

This update improves the proxy support option. Before you install this update, on the Visual Studio Code Marketplace, select Switch to Pre-Release Version.

May 16, 2024​

Veracode Integration for Jira Cloud 4.14.0​

The Monitoring and Troubleshooting page now successfully displays imports from One Time Import and Selective Import.

May 10, 2024​

Veracode Scan for VS Code 1.9.0 - Pre-release​

This update is a pre-release that supports signing in to Veracode through a proxy server. Before you install this update, on the Visual Studio Code Marketplace, select Switch to Pre-Release Version.

May 3, 2024​

Veracode SCA Scan for JetBrains 0.8.1​

The debug option now successfully saves all logs.

May 2, 2024​

Veracode Static for Eclipse 3.9.0​

This update includes minor performance improvements.

April 18, 2024​

Veracode Scan for VS Code 1.8.1​

This update includes the following improvements:

• The timeout limit for Static Analysis scans has increased to 10 minutes.
• Fixed findings no longer appear on the PROBLEMS tab in VS Code.

April 17, 2024​

Veracode Static for Visual Studio 2019 and 2022 v1.12.0​

This update includes the following improvements:

• After you import an XML file of your results into Visual Studio, the View Policy Results pane now shows the correct data paths.
• If you use both the Greenlight extension and the Static Analysis extension in your IDE, you no longer experience conflicts between these extensions.

April 11, 2024​

Veracode SCA Scan for JetBrains 0.8.0​

This update includes a refreshed user experience.

April 10, 2024​

Veracode Workflow App 0.2.0 for GitHub​

This update includes the following improvements:

• For policy and pipeline scans:
  • To turn on policy or pipeline scans, you must now add the analysis_on_platform true flag. By default, this feature is turned off.
  • By default, the analysis_branch flag is now set to your default branch automatically. You can set this flag to a different branch.
  • When you open a pull request (PR) against a branch you are scanning, the integration creates a sandbox scan from the source branch. You can view the scan results under the branch name in the Veracode Platform. When you merge the PR, the integration removes the sandbox scan, and then starts a new policy scan in the target branch. You can view the scan results under the repo name in the Veracode Platform.
  • Mitigated findings from a pipeline scan no longer appear in the list of findings.
• For GitHub Issues:
  • New issues flag to enter a command that runs on-demand scans on a repo issue.
  • New create_issue flag that creates GitHub Issues from Static Analysis findings.
  • New create_code_scanning_alerts flag that creates code scanning alerts from Static Analysis findings. The alerts appear on the GitHub Security page.
• For configuration options:
  • You can now configure an allowlist with in the central repo_list.yml file.
  • You can now override most global configurations by adding custom configurations to a veracode.yml file at the root of your source repo.
  • New use_custom_workflow flag that can use a workflow from the source repo to build the project or artifact you can upload for scanning.
• For error handling:
  • New error messages that display as annotations if API credentials are invalid.
  • New error message when the integration is not able to find a policy name.
• The integration now autopackages Java projects for more reliable builds and more accurate scan results.

Java API Wrapper 24.4.13.0​

This update includes the following improvements:

• Adds support for the publishedscansonly parameter.
• Minor performance improvements.

April 3, 2024​

Veracode Scan for VS Code 1.8.0​

This update includes the following improvements:

• Adds Veracode Fix support for Kotlin and Scala.
• The Flaw Details tab now renders correctly for .NET projects.
• Minor improvements to packaging support.

April 1, 2024​

Veracode Integration for Jira Server 4.7.0​

You no longer see a NullPointerException error when you run a one-time import, selective import, or automated import.

March 28, 2024​

Veracode Static for Visual Studio 2019 and 2022 v1.11.0​

The integration now successfully verifies your Veracode API credentials.

March 25, 2024​

Veracode Scan for VS Code 1.7.0​

This update includes minor improvements to packaging support.

March 21, 2024​

Veracode Static for Visual Studio 2019 and 2022 v1.10.0​

In the Project Settings Wizard, when you select an application, the list of sandboxes now shows the sandboxes for the selected application only.

March 14, 2024​

Veracode Static for IntelliJ 3.6.0​

This update includes the following changes:

• The Veracode option is now visible on the main menu.
• Adds support for IntelliJ version 2023.3.4.

March 7, 2024​

Veracode Scan for VS Code 1.6.0​

This update includes the following improvements:

• The debug option now supports Static Analysis scans, Veracode Fix, and the autopackager, in addition to SCA scans.
• You can now clear all findings.
• Minor performance improvements.

March 4, 2024​

Veracode Integration for Jira Cloud 4.13.2​

This update adds historical diagnostics data about each import to the Monitoring and Troubleshooting page.

February 29, 2024​

Veracode Jenkins Plugin 24.2.23.0​

This update improves security by increasing the minimum supported versions of Jenkins and Java. To install this update, you must have a minimum Jenkins version of 2.414.3 and Java 11.

February 28, 2024​

Veracode SCA Scan for JetBrains 0.7.2​

This update includes the following improvements:

• You can now use a debug option to troubleshoot scan errors.
• Minor performance improvements.

Veracode Greenlight for Visual Studio 2019 and 2022 v1.5.0​

This update includes the following improvements:

• Scans no longer fail with this error message: “The selected file must be in a solution. Open the solution that contains this file and try again.”
• Improved error handling.

February 23, 2024​

Veracode Integration for Jira Server 4.6.0 ​

With this update, when you select links in Jira tickets that open application profiles located in the European region or United States Federal region, the links no longer open in the Commercial instance of the Veracode Platform.

February 20, 2024​

Veracode Azure DevOps Extension 3.26.0​

This update includes the following improvements:

• Adds support for the includenewmodules parameter.
• You can now add the following information as tags in work items: scan type, finding severity, due date, and CVE ID (SCA only).
• Work items now show the correct CWE ID.
• The Upload and Scan task no longer fails when you use the environment variable JAVA_TOOL_OPTIONS.

February 15, 2024​

Veracode Scan for VS Code 1.5.0​

This update adds Veracode Fix to Veracode Scan for VS Code. To fix flaws in seconds from within your IDE, you can now apply AI-generated fixes directly to flaws.

January 30, 2024​

Veracode Scan for VS Code 1.4.1​

This update includes the following improvements:

• Fixes a typo in the Views and More Actions menu.
• The Remediation Guidance text in the Flaw Details tab is now visible in light mode.
• Minor performance improvements.

January 29, 2024​

C# API Wrapper 24.1.10.1​

This update adds support for the -includenewmodules parameter.

January 11, 2024​

Veracode Scan for VS Code 1.4.0​

This update adds Static Application Security Testing (SAST) to VS Code. Developers can use SAST to find and fix flaws in their code and use Software Composition Analysis (SCA) to find and fix vulnerabilities in open-source code from within the IDE.

This extension replaces Veracode SCA Scan for VS Code. Greenlight for VS Code is now deprecated and will not be supported after June 2024.

Previous updates​

2023 updates​

2022 updates​

2021 updates​

2020 updates​