Obtain the Pipeline Scan Files

You can obtain the latest version of the Pipeline Scan as a ZIP archive from Veracode or as a container image from Docker Hub.

1. Go to one of these locations:
   • Docker Hub to use a Docker image.
   • Veracode Downloads to download a ZIP archive.
2. If you downloaded the ZIP archive, extract the contents to a local directory.
   The ZIP archive contains the pipeline-scan.jar, which includes all dependencies except the required Java 8 compatible JRE, and a README with detailed code examples. You add the full path to pipeline-scan.jar in your pipeline scripts for running a Pipeline Scan. The provided script examples include steps to both download and extract the ZIP as part of the Pipeline Scan job.