Product Announcements — pmonaghan (Veracode, Inc.) asked a question.
🌟 SCA update: enhancements to Go scanning
Veracode has made some significant enhancements to the SCA’s ability to scan projects written in Go language. Veracode reduced false positives and increased scan speed by changing the way SCA builds Go dependency graphs, reduced false negatives by detecting module paths containing sub-directories, fixed the issue where component names would be missing whenever agent scan results were linked to an application, and fixed the issue where indirect dependencies were showing in agent scan results as direct libraries instead of transitive libraries.
.png){kind=logo}
thak you very much for share this new.
Hi! Thanks for the heads up. Currently our tenant does not have this update. Do we need to do something in our workspaces?
Everything at Veracode is multi-tenant, so there's no concept of some customers running one version of the platform and other customers running a different version. With agent scans, however, there is a client to download. Best practice is to add to your CI pipeline script the curl command that will download the latest version. See https://docs.veracode.com/r/Integrate_Veracode_SCA_Agent_Based_Scanning_with_Your_CI_Projects. The Go enhancements were added to version 3.8.23 of the agent. The latest version is 3.8.31.