Initial SCA Customer Onboarding

The Goal of Software Composition Analysis onboarding is to complete the initial set up and alignment with your company’s risk program, as well as provide enablement workshops for your internal team to learn the product and integrate into your development toolchain.

 

Once this portion of your onboarding is complete, your internal team should have the tools necessary to teach your internal teams how to use this product. It is generally recommended to follow enablement topics numerically for each product unless you have prior security tool experience.

 

Below you will find the 7 enablement topics in the Initial SCA Onboarding Program:

Workshop NameDescriptionAvg TimeDesired ContextRequired Attendees
1. SCA Agent-based enablement
Discuss use case for Agent-based versus Upload & Scan
30 mins
• Package Managers
• Programming Languages
• Software Security
• Developers
2. SCA Agent User roles
Discuss user roles and teams for agent-based scanning
15 minsNone
• Software Security
3. Workspace and project app structuring
Discuss how to organize application within workspaces and projects
30 mins
• Customer Application
• Repo Structure(Monorepo, multirepo, etc.)
• Programming Language & Framework
• Software Security
• Developers
4. Review Reporting and results management
Review results, vulnerable methods, ignoring issues, and how to fix a finding
30 minsNone
• Software Security
• Developers
5. IDE Plug-ins (Veracode Authored)
Discuss IDE plug-in and how to start scans & review results
30 mins
• Most utilized IDEs
• We will demo if available
• Software Security
• Developers
6. Automate scanning in Source Code Repo (Veracode Authored)
Demonstrate how to automate scanning from the repo with Veracode-authored plugins
1 Hr
• Most utilized Source Code Repo
• We will demo if available
• Software Security
• DevOps Engineer
7. Automate scanning in CI Build System (Veracode Authored)
Demonstrate how to automate scanning from the CI build system with Veracode-authored plugins
1 Hr
• Most utilized CI/CD Build System
• We will demo if available
• Software Security
• DevOps Engineer

 

 

 

*This is not an exhaustive list and does not outline the full capabilities or features of our products as it relates to the integration into individual customer needs.

Topics (0)

Related Articles

Related Topics

    Ask the Community

    Get answers, share a use case, discuss your favorite features, or get input from the Community.