EGertis462759 (Community Member) asked a question.
How to use a version controlled script for container scanning in veracode
Having a shell script isn't necessarily bad as long as we can verify it's integrity, but the way that is done in the industry is to have a checksum verification of the file. Currently, sourcecclear does not provide that. In our we're probably better off pulling down that shell script and putting it into our own version control so we can protect ourselves from injection. has anyone done this before?
.png){kind=logo}
Hello @EGertis462759 (Community Member) ,
The functionality that you are asking about is not currently supported. One of our engineers suggested that you open an Idea in the Community so that there can be a conversation about the user case.
Jason
Veracode Support Engineer
A simple solution is to place the script in version control.