I am planning two flows, depending on the branch.

One, it waits for the Veracode scan results, integrated into AzDO and fails the build if it doesn't pass Veracode testing, either way uploads the results so it is included in the build (in a the tab created as part of the Veracode task).

The other, for branches in earlier stages of development where they will be more frequent and I don't want to increase the build duration by 3X, submits the scan but doesn't wait. For this scenario, I would like to publish it to a MS Teams channel so that the Dev team can see when it is done and react accordingly.

Right now, the results are emailed, and specifically it seems to the user the API is associated with. So it isn't even communicated to the team as a whole when it completes, so there is no notification that anything is started, in process, or complete beyond the API user.

We have LONG moved away from relying on emails for DevOps integrations (as I think most of tech has), and rely on Teams.

I thought maybe using the Teams email address for a channel, but there is no way to specify an alternate email for receiving reports in Veracode, at least that I can find. Although this wouldn't be ideal, because it only presents the status, not the results, still requiring you to login to see, it it as least communicating something to a wider audience.

I'm assuming I'm missing something because this seems like it would be a pretty common use case--reporting the results of a scan.

Thanks!