📣 Product Announcements 

• Highlights of November Release: Docker Hub images, Pipeline Scan support for React, Titanium, and Cordova, and new Dynamic Analysis features (New Target URL Search, CSP Header Checks, Expanded Secure Cookie Attributes List).  
• State of Software Security v11 is now available – download the report and find out how you compare! Veracode customers have unique access to the November webinar (recording now available) where you’ll learn how to benchmark your AppSec program using data from SOSS v11.  
• First quarterly roadmap showcase webinar – see what’s coming up on the roadmap -- recording now available. 

🎊 Secure Coding Challenge Winners Announcement 

Congratulations to the top 10 winners of our first Community Secure Coding Challenge! Thanks to everyone who participated in the contest. See you in the next Challenge in January!  

💻Call for Developers & DevOps Engineers: User interview with the Veracode Static Analysis Team 

Interested in shaping the future of our Static Analysis capabilities? The Static Analysis team is looking to get on a call with you to understand: 

• your experience setting up analysis of your applications for the first time 
• your source control and application build process 
• your experience of automating scans & scan reporting. 

Sign up by leaving a comment on this post or reach out to @Jon J (Veracode Product Manager) (Veracode)​ directly at jjanego@veracode.com.

🙋 Do you have the answers? 

• @Catalin (Community Member)​ asked: How to resolve ASP.NET webform static scan CWE 80 issue when rendering strings composed of several chunks? 
• @JMarlin606517 (Community Member)​  asked: How to remove the mitigation proposals in my developer sandbox that no longer exists? 

🔖Published: Veracode Community Software Composition Analysis (SCA) Azure DevOps Extension  

Thank you @Joe Gatt (Community Member)​ for generously sharing your Azure DevOps plugin! This plugin allows users to seamlessly integrate Veracode Agent-Based SCA scans with Azure DevOps build or release pipelines and is now available on Github. Any questions or feedback? Feel free to reach out to @Joe Gatt (Community Member)​ or comment on his Community post.