You can obtain the latest version of the Pipeline Scan as a ZIP archive from Veracode or as a container image from Docker Hub.
Veracode provides a container image of the Pipeline Scan on Docker Hub.To download the Pipeline Scan from Veracode:
This ZIP file contains:
- pipeline-scan.jar, which includes all dependencies except the required Java 8 compatible JRE.
- A README file.
Note: You can extract the ZIP file to local storage if you want your pipeline scripts to refer to the pipeline-scan.jar file in local storage. However, in the examples, the scripts include steps to download and extract it as part of the Pipeline Scan job.