hello @ARios378383 (Community Member)​ 

Absolutely. You'll need to follow instructions from docs https://docs.veracode.com/r/r_pipeline_scan_commands

Bellow, is an example of task to use Pipeline Scan and break the build.

Add a new CMD task. Download Pipeline Scan, unzip and execute:

- task: CmdLine@2

  inputs:

    script: |

      ls -l $(Build.ArtifactStagingDirectory)

      curl -sSO https://downloads.veracode.com/securityscan/pipeline-scan-LATEST.zip

      unzip -o pipeline-scan-LATEST.zip

      java -jar pipeline-scan.jar -vid $(VERACODE_ID) -vkey $(VERACODE_KEY) -f [THE APP PACKAGED] --project_name [YOUR APP PROFILE NAME] -fs="Very High, High"

  displayName: 'Pipeline Scan'

1. As you can see, Pipeline Scan will break the build if any vulnerablity VeryHigh or High were found into your code.
2. You can break the build by CWE ID,. Bellow an example to break based on XSS and SQL injection vulns:
   1. java -jar pipeline-scan.jar -vid $(VERACODE_ID) -vkey $(VERACODE_KEY) -f [THE APP PACKAGED] --project_name [YOUR APP PROFILE NAME] -fc=80,89
3. You can break the build based on Default Security Policy, like: -pn "Veracode Recommended Medium"
4. You can break based on Custom Security Policy as well, using -rp "Name of you custom policy to be downloaded as a file" -pf "Name of policy file downloaded"