Hello Community,  

Hope you’re enjoying the summer (or winter for folks in the south hemisphere). I’m excited to share the monthly round-up in this new Community that we launched just two days ago! Check out what's new in this release, July trending discussions, new resources, upcoming events, and unanswered questions that you may chime in:

🚀 NEW RELEASE 

The new Community experience comes with a cleaner UI, enhanced features and content, including: 

• Community Launch Pad that helps you set up for a more engaged Community experience. 
• Personalize Homepage with posts related to the topics you followed (try starting with the most popular topics) 
• How to Use Veracode Guide with documentation, videos, and tips that help new Veracode customers get off to the right start. 

🔥 TRENDING DISCUSSIONS 

Those were just a few of the engaging discussions last month, what did I miss? Let me know in the comments below! 

• What security horrors have you seen or heard before? 
• What advice would you give to someone new to Veracode? 

🔖 NEW RESOURCES 

Blog: "Your 30-60-90 Day AppSec Plan" highlighting insights shared by seasoned AppSec experts @Mark_M (Community Member)​ , @mwaldis335267 (Community Member)​

Takeaway: An action plan to roll out your AppSec programs in 90 days.

Article: "How to Fix a Veracode Static Analysis Flaw in 3rd-Party Software" by @Boy, Security Consultant (Veracode)​ 

Takeaway: Guidance on handling 3rd party risks with Static Analysis (with examples).

Article: "Java Remediation Guidance for XXE" by @vnhin (Veracode, Inc.)​ 

Takeaway: Java remediation guidance for flaws of type CWE 611 External Entity Resolution.

Article: "How 3rd Party Content is Our Responsibility" by @Dennis, Principal Security Consultant (Veracode)​ 

Takeaway: The engineering and security best practices for securing third-party code.

📅 UPCOMING EVENTS 

Community Event – New “Ask Me Anything” series with AppSec leaders coming this fall.

ℹ️Have a topic in mind that you like to hear about or interested in becoming a host, ping me!

Customer Event – August Product Showcase @August 12

ℹ️ Customer members only. Registration available on the Community homepage. If you’re a customer and didn’t see the banner, reach out to me!) 

🙋UNANSWERED QUESTIONS 

Here are some questions that are still open and waiting for your contributions. It takes a community to make the Community helpful. 

• How do you handle 3rd-party code? 
• Does anyone have experience configuring customMavenOptions in agent.yaml? 
• Can I block one pipeline from Veracode console? 
• Can I stop my Jenkins pipeline when Veracode Upload and Scan fails? 
• How do I update existing sandboxes with recreate flag to true using java wrapper? 

Did I miss anything? Let me know in the comments what do you want to see in the next monthly Community news. 

--Shuning