🚩 What’s New at Veracode: (SAST) Apex Support, (Platform) New APIs, Updated Application List Views, (eLearning) New Secure Coding Courses

Hello Community! Check out the features that have been released over the past week: 

 

Static Analysis 

  • Support for Apex: Visualforce, Lightning, and Aura Components 
  • Improved Support for Applications Using Apex, Java, Python, and the Play Framework 
    • Apex version 49. 
    • Java applications built on Java 14. 
    • Version 2.6 and 2.7 of the Play framework for Scala. You may see additional findings for Play applications as a result of these improvements. 
    • Python application analysis improvements, including additional security checks for risks related to certificate management and cryptography settings. You may see additional findings for Python applications as a result of these improvements. 
    • Updated CWE definitions for flaws that had been reported previously as CWE 100 and 391. MITRE is deprecating these CWEs. MITRE is recategorizing CWE 100 flaws as CWE 1174, and recategorizing CWE 391 flaws as either CWE 252 or CWE 273, depending on the details of the flaw. 
    • Updated policy rules that included entries for CWE 100 and CWE 391 to include the new CWEs. 
    • After you run the next scan of affected applications, the Veracode Platform reports and analytics reflect the new CWE values. Data for previous scans still include the historical values. 

Platform 

  • New Identity REST APIs â€“ 
    • Allows you to manage users, teams, and business units. You can also use these REST APIs to create API service accounts and manage API ID/key credentials 
    • ⚡️ Learn more from @Tim J (Veracode PM) (Veracode)​'s post 
  • Updated Greenlight Scans Explore Page - reflects the new terminology of IDE scan (formerly known as Greenlight) and to include pipeline scan data. 
  • Updated Applications List View  
    • Now provides customizable columns and improved searching and filtering.  
    • We're gradually releasing this feature as part of each Platform release, so it may not be immediately available to you. 
    • ⚡️ Check out @Tim J (Veracode PM) (Veracode)​ 's post for details

eLearning 

  • New Secure Coding Foundation eLearning Courses 
    • Secure Coding Foundations - Authentication 
    • Secure Coding Foundations - Authorization 
    • Secure Coding Foundations - Configuration and Deployment 
    • Secure Coding Foundations - Data Protection 
    • Secure Coding Foundations - Information and Error Handling 
    • Secure Coding Foundations - Trust Boundaries 
    • Secure Coding Foundations - Validation and Encoding 
  • eLearning User Interface Enhancements 
    • Manager window you use to assign learners to a manager 
    • Curriculum window you use to assign learners to a curriculum 

Topics (7)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.