• SamHouston (Veracode)

    Hi @NPatel623625 (Community Member)​ - Please let me know if there's any specifics with your question. Otherwise, here's a general answer:

     

    Veracode offers IDE plugins for seamless integration into your development workflow. These include:

    • Veracode Scan for VS Code: This is recommended over the deprecated Greenlight for VS Code extension for file-level static analysis scans. Refer to the docs.
    • Veracode Scan for JetBrains: This is recommended over the deprecated Greenlight for IntelliJ plugin for file-level static analysis scans. Refer to the docs.
    • Veracode Greenlight for Eclipse: This plugin allows for file-level static analysis scans within the Eclipse IDE. Refer to the docs.
    •  

    Additionally, Veracode provides the Static for Eclipse plugin for uploading binaries for static analysis directly from Eclipse. Refer to the docs.

     

    For automated builds and scans, especially within CI/CD pipelines, you can integrate Veracode with tools like Atlassian Bamboo. This typically involves using the Veracode Java API wrapper. Refer to the docs.

    If you are using Maven, Veracode SCA (Software Composition Analysis) offers agent-based scanning. You can run these scans using the Veracode SCA CLI agent. Refer to the docs.

     

    Expand Post

Topics (3)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.