Obtain the Pipeline Scan Files

Getting Started with Veracode

You can obtain the latest version of the Pipeline Scan as a ZIP archive from Veracode or as a container image from Docker Hub.

To obtain the Pipeline Scan files:
  1. Go to one of these locations:
  2. If you downloaded the ZIP archive, extract the contents to a local directory.
    The ZIP archive contains the pipeline-scan.jar, which includes all dependencies except the required Java 8 compatible JRE, and a README with detailed code examples. You add the full path to pipeline-scan.jar in your pipeline scripts for running a Pipeline Scan. The provided script examples include steps to both download and extract the ZIP as part of the Pipeline Scan job.