June 2025 Recap Newsletter

Summer’s here—and while the temperatures are rising, so are the stakes in application

security. As the digital world heats up with new threats and evolving attack surfaces, we’re

here to help you keep your cool. Check out what’s new this month at Veracode—because

staying ahead In AppSec is the best way to beat the heat.

Upcoming Events:

Meet us at Black Hat Conference- Veracode Booth #5245

• Please visit: https://www.veracode.com/events/blackhat-conference/ for more

details on our exclusive VIP events, or book a meeting/demo with us onsite.

Veracode Product Releases & Feature Enhancements:

Learning Paths:

• Getting started with Veracode is easier than ever with our updated Learning Paths.

These step-by-step guides cover everything from setting up users and applications

to mastering Static Analysis, Dynamic Analysis, and SCA agent-based scanning.

• Check out the all-new Scan and Fix in Your IDE path to quickly set up and use Veracode Scan for VS Code!

Software Composition Analysis:

• Poetry Package Manager for Veracode SCA

• Support for poetry.lock file scanning - eliminate extra steps in your Software
• Composition Analysis scans
• Available now in agent and upload and scan SCA tools.
• Contact Customer Success at customersuccess@veracode.com for onboarding assistance or visit the documentation to get started:
  • Python: https://docs.veracode.com/r/c_sc_python
  • Agent-based scan language support matrix: https://docs.veracode.com/r/c_sc_agent_languages
  • SCA upload and scan language support matrix: https://docs.veracode.com/r/Understanding_the_Upload_and_Scan_Language_Support_Matrix

Dynamic Analysis:

• Enhanced reporting capabilities in DAST Essentials Enterprise Mode

• DAST Essentials Enterprise mode now supports downloadable scan reports.
• These reports provide greater visibility into scan coverage and scanner behavior.

Integrations Updates:

• Veracode Scan for Visual Studio v0.4.9

• This update achieves feature parity with the Veracode Scan extension for Visual Studio 2019, providing a consistent scanning experience across supported Visual Studio versions

Veracode Scan for VS Code v1.14.1: This update includes the following

improvements:

o Files in node_modules are now excluded from scan searches

o Added error logging for SCA agent downloads

o Custom error messages are now shown when no supported package manager or build system is detected during SCA agent scans

o You can now search application profiles directly within the IDE

o Paging is now supported to ensure all flaws are fetched during scans

Training Updates: New Security Labs Lessons

• Container Security in Docker - Resources

o Soft Limits & Hard Limits

o These labs help developers strengthen their understanding of container security, identify potential vulnerabilities, and apply best practices for securing Docker environments.

Mandatory Greenlight Upgrades for Eclipse and IntelliJ

Veracode has made a change to the Greenlight API that will impact the following plugins.

- Veracode Greenlight for Eclipse version 2.9.6 and earlier

- Veracode Greenlight for IntelliJ version 1.8.5.2022 and earlier

New versions of these plugins will be available on February 3, 2023 and February 6, 2023, respectively. To continue using these plugins, you must upgrade to the new versions by February 13, 2023.