You can obtain the latest version of the Pipeline Scan as a ZIP archive from Veracode or as a container image from Docker Hub.
Veracode provides a container image of the Pipeline Scan on Docker Hub.
To download the Pipeline Scan from Veracode:This ZIP file contains:
- pipeline-scan.jar, which includes all dependencies except the required Java 8 compatible JRE.
- A README file.
Note: You can extract the ZIP file to local storage if you want your pipeline
scripts to refer to the pipeline-scan.jar file in local
storage. However, in the examples,
the scripts include steps to download and extract it as part of the Pipeline Scan
job.