Using the Results API

APIs

You can use the Veracode Results API to access your application assessment data from another application or a script.

For example, you can write a script to automatically download newly published scan results into a bug tracking system. You can also use this API to retrieve information in XML about application profiles, completed and in progress builds, and detailed application results data (including call stacks) or summary results data.

The Veracode Results API is a basic HTTPS-based request API that uses simple HTTP calls and returns data in XML format. You can use any technology that supports making HTTP calls and parsing XML to access the API.

To learn about how to use the Results API, read the tutorial.

To use the Results API, you must have either a Veracode non-human API customer account with the Results API role, or a Veracode human user account with the Reviewer or Security Lead role.

For performance reasons, the Results API automatically compresses large XML files using gzip if your requesting tool supports it. You are strongly encouraged to use a user-agent that supports gzip, such as a modern browser, curl, or other technology, to access the Results API. You can use any tool that supports HTTP to test the Results API.