LChitra151727 (Community Member) asked a question.
Is there a way to automate SCA agent based scanning using Veracode SCA agent based API's for thousands of different applications
Is there a way to automate SCA agent based scanning using Veracode SCA agent based API's for thousands of different applications. Different applications in the sense, the OS differs, the repo differs and dependencies differs.
.png){kind=logo}
Hello @LChitra151727 (Community Member) ,
That is possible to do with automation within CI/CD pipelines and would advise reading the Help Center article Veracode SCA Best Practices for Automated CI/CD for more information. There are also tools like Jenkins, Azure DevOps, GitLab, GitHub, etc that allow integrating into your pipelines. Your Customer Service Engineer should be able to help you determine what is the best fit and method for you.
Jason
Veracode Support Engineer
Hey Jason,
Thanks for the quick answer.
But i was looking automation in a different way where the veracode agent based API's are used to scan thousands of different applications (will have different OS combinations, different repositories) in a single windows environment and post the results to Veracode SCA under different workspaces as a project
Hi @LChitra151727 (Community Member) ,
The type of automation that you are looking for doesn’t exist but the best way to utilize the SCA agent-based is having your development teams integrate it into your build process. If your developers are having trouble figuring out the integration, I would suggest scheduling a consultation.
Jason
Veracode Support Engineer
Sure, Thanks @Jason M., Veracode Support (Veracode)