Veracode is changing the URLs that the Software Composition Analysis (SCA) agent uses to manage scans and changing the URL used for downloading the agent. These changes will NOT affect anyone whose firewalls or proxy servers allow full access to any site in the Veracode.com domain and will NOT affect SCA Upload scans. But customers who allow access only to specific sites - likely the ones listed on this page in the help center - will need to add the URLs listed below to their allow lists. The version of agent that was released on 4-Oct (3.8.76) uses https://sca-api.veracode.com by default for Commercial users. Although the old URL, https://api.sourceclear.io, will still work, users would have to update the apiUrl setting in either their agent.yml file or their environment variable to use the old URL. For documentation on the apiURL setting, click here and here. Likewise, future versions of agent that are expected to be released at the end of October will by default use the new download URL, https://sca-downloads.veracode.com, and the new API URLs, https://sca-api.veracode.eu and https://sca-api.veracode.us, for the European and US Federal Government regions respectively.  

COMMERCIAL

• https://sca-downloads.veracode.com
• https://sca-api.veracode.com

EU

• https://sca-downloads.veracode.com
• https://sca-api.veracode.eu

FED

• https://sca-downloads.veracode.com
• https://sca-api.veracode.us

Thank you.