Veracode Software Composition Analysis Release Notes

Veracode Release Notes

November 22, 2019

Updates to SCA Agent REST API
The Veracode SCA Agent REST API for Veracode Agent-Based Scan now supports the following capabilities:
  • Regenerate an agent token
  • Revoke an agent token
  • Get a hyperlink to the details page for an issue in Veracode Agent-Based Scan
  • Filter issues by whether they include vulnerable methods

October 23, 2019

CVSS Version 3 Support in Integrated SCA
Veracode Integrated Software Composition Analysis (SCA) now supports applying version 2 or version 3 of the Common Vulnerability Scoring System (CVSS) to your policies. The version you apply can impact whether a finding causes your application to fail policy.

October 9, 2019

Updates to SCA Agent REST API
The Veracode SCA Agent REST API for Veracode Agent-Based Scan now supports the following capabilities:
  • Get projects from a workspace
  • Get branches from a project
  • Get issues from a project, including filtering by branch and by creation date
  • Create and delete workspaces
  • Get teams from a workspace
  • Delete teams from a workspace
  • Add teams to a workspace
  • List libraries from a workspace
Note: If you use SourceClear API credentials, the host URL is api.sourceclear.io. If you use Veracode Platform API credentials, the host URL is api.veracode.com/srcclr.