🚩Weekly Product Update (02.11.21): Analytics and Azure, plus More Static Support

Here's your summary of the latest and greatest Veracode features:

 

#Veracode Platform​ 

  • New Static Analysis Findings Information in Veracode Analytics - more details about findings that relate to your Static Analysis scans, including the function name, class path, and most recent line number in which Veracode discovers the findings. This data enables you to recreate a similar view as the Triage Flaw view in the Veracode Platform, but across multiple application profiles. 
  • New Security Program Overview Dashboard in Veracode Analytics - a new dashboard that contains data to help you track and understand how your AppSec program is trending, based on your target goals. With this dashboard, you can see current and historical trends for policy compliance, as well as better understand policy compliance behavior. New information available to you includes details such as how an application is meeting compliance over time. 

 

#Azure DevOps​ 

Veracode Azure DevOps Extension version 3.4.0 includes these updates: 

  • Use YAML to add Veracode analysis to build pipelines. 
  • Use YAML to import findings as work items into Azure DevOps. 
  • Include mitigation and annotation comments when importing new findings as work items. 
  • Set a timeout to fail a build if Veracode analysis does not complete within a specified time

 

#Veracode Static Analysis​ 

  • New Veracode Static Analysis Support for GCC 9, Koa.js, Hibernate Framework, and Autofac Framework 
  • Improved Veracode Static Analysis Results for Android, PHP, and Python Applications 
  • Improved Prescan Warning Messages 
  • Improved Results Consistency for Java Applications 
  • Improved Results Accuracy Within JSP Files 

 

@Integrations Group​ @Analytics Group​ 


eric likes this.

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.