Hi all - a quick heads up about an upcoming analytics change. In the upcoming release, we’re updating the calculation for the ‘First Found Date’ shown in the SCA findings. In the update, the First Found Date will reflect the date when a vulnerability is found in a library, rather than the date the library was found. In addition to this adjustment, a new field will be added to show the date this version of the library was first observed in the app (fyi - this is the calculation of the existing field).

This update ensures that the First Found Date reflected in SCA findings are aligned with the definition of this field for all other scan types within the Veracode Platform.

Please comment here if you have questions. Thank you!