
Shuning, Veracode Community Manager (Veracode) asked a question.
Hello Veracode Community, it's time to share the Community news for this month: top contributors, best practices from members, trending discussions, programming updates, and more!
TOP CONTRIBUTORS
Thank you, everyone, who visited Community, shared your challenge, participated in discussions this month! Itβs members like you who make the Community it is today. Special Shout out to:
- @ABacchi035478 (Community Member)β β for your continued contribution to the Community, such as the tip of using the REST APIs with Postman, an example of PowerShell snippet with the Veracode APIs to delete an incomplete scan
- @MBretl008962 (Community Member)β β for sharing your workaround for SCA agent to work in the Jenkins pipeline
- @JHyun398998 (Community Member)β β for sharing your workaround for packaging a scala app for SCA.
- @ig596 (Community Member)β β for collaborating with @DHowe452209 (Community Member)β to resolve an unexpected package showing up in the SCA results.
- @HSingh007417 (Community Member)β β for being the most curious members with four insightful questions!
BEST PRACTICES FROM MEMBERS
We asked members about the best practices they are adopting to drive the collaboration across the security and development teams. Huge shout out to @ABacchi035478 (Community Member)β , @DeCaPa (Community Member)β , @Mark_M (Community Member)β , @mwaldis335267 (Community Member)β , @Sky2021 (Community Member)β for generously sharing your takes:
COMMUNITY STATS
Weβve got 50 new questions this month while making sure no question is left behind β 98% of questions posted in April are responded. Shout out to members and Veracoders for your efforts in getting after every question by sharing your insights, experience, and product knowledge.
TRENDING DISCUSSIONS
Those were just a few of the engaging discussions last month, what did I miss? Let me know in the comments below!
- What are your best practices for security & development teams to work together most effectively?
- How to fix CWE 316?
- How to fix CWE 404 in .NET Core 2.0?
PROGRAMMING UPDATE
- Introducing #Product Updateβ β @Tim J (Veracode PM) (Veracode)β , along with other Veracode PMs have started this new series where the Community will get insights into the new Veracode features before anyone else and where you can provide instant feedback.
- Launching #TipsTuesdayβ βwe've collaborated with a few members and Veracoders to introduce a bi-weekly discussion & article around managing AppSec programs and developing secure applications β first tip will go live next Tuesday.
- Re-thinking #The Week Aheadβ β weβre retiring this Monday programming and are looking for ideas for a new Monday series -- share your feedback with us in the comment seciton below!
UNANSWERED QUESTIONS
Here are some questions which are still waiting for your contributions. It takes a community to make the Community helpful.
- Choosing AppSec technologies: How do you decide which technologies to pick for Application Security?
- SCA results: Is there a way to ensure that the scan results only include the packages that are listed in the "packages.config" file (i.e. only the ones we use)?
Did I miss anything? Let me know in the comments what do you want to see in the next monthly Community news.
--Shuning
.png)