🚩Weekly Product Update: Pipeline and Policy

Hi Community! Check out the latest updates on Veracode Static Analysis, Veracode Platform, and Veracode eLearning: 

 

#Veracode Static Analysis​ 

  • Pipeline Scan updates
  • Improved scan results for: 
    • Angular templates 
    • Apache Commons 
    • AWS SDK for Java 
    • JavaScript 
    • Python 

 

#Veracode Platform​ 

  • Changes to OWASP Mobile Policy Rules
    • Updated policy rules include the OWASP Mobile security standard to reflect additional research. OWASP Mobile policy rules now include these CWEs: CWE-77, 78, 80, 252, 287, 319, 345, 404, 415, 416, 601, 614, 676, 693, 757. 
    • Applications that contain these flaws may fail OWASP Mobile policy rules as a result of this update. Veracode will apply the update upon rescan of the application. 
  • Improved Notifications for Delayed Scan Results
    • You now receive email notifications that include additional details and links for the affected scan. 
    • The Veracode Platform will also Indicate delayed scans that are under investigation. 

 

#Veracode ELearning​ 

  • eLearning administrators can now assign a learner to multiple eLearning curricula. 
  • Veracode added seven new Secure Coding Foundation courses to learner level 1. 
  • Learners who previously completed level 1 must take the newly-added courses to complete this level. Because each level depends on the previous level, these levels show as incomplete until the learner completes them. 
  • The eLearning report for learners now includes a Date Started column. 
  • The eLearning settings have been removed from the Admin > Manage Users page. All eLearning administration actions are now available from the Admin > eLearning page. This page provides a centralized location where you can use filtering options and perform all actions on one or more learners. 
  • The eLearning fields have been removed from the SAML Self-Registration page. 

 

📣 Did you know?  

To keep up with product updates, you can subscribe for weekly digest emails – a summary of new posts made in the Product Announcements group from the last week. Here’s how:  

  1. Join Product Announcement Group   
  2. Make sure your notification is set to “Weekly Digest” 

VCode likes this.

Topics (5)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.