What

SCA Agent has adopted Veracode’s new Flexible Policy service. The Flexible Policy Service will eventually allow customers to leverage rego when they define custom policies. All Veracode Default Policies are available for usage as well.

Why

SCA Agent is the first product to adopt this new policy service. The aim is to give customers the option to customize their policies beyond what the UI allows. For example, users will eventually be able to override severity for specific CVEs and set different data points as elements of their policies.

When

Now! If you would like to enroll in this EA program please reach out to your Customer Success Manager (CSM) about enabling this feature enable for your account.

Q&A

Q: Who is eligible for access?

A: This functionality is currently available for SCA Agent users. It will be made available to SCA Upload users at a later date.

Q: Will my scan results be different?

A: No. Scan results will remain the same. Our initial release was an infrastructure change to leverage the new policy service and the technology they have implemented (Rego / OPA).

Q: How will I set my policies if I decide to adopt this new policy service?

A: The same way you are currently setting policies. You will have the same policy wizard to define policies.

Q: What changes are coming to the policy UI?

A: Users will see agent-specific fields in the existing UI, but later this year, users will have a new UI experience. While the Policy Wizard will still be a core feature, users will be able to view / edit rego in the UI to create more granular policies.

For more details, please see the attached FAQs. Thank you.