Automate scans easily – and at scale - by leveraging our Veracode app and using a single workflow to control your security program across your organization!

Features at-a-glance

• Automate scans from one place across thousands of repositories
• Static, SCA, and Container scans on developer activity from a single “Master” workflow
• Zero configuration for Developers - scans run automatically without having to add workflows to individual repo’s
• Broad language support

Scan all your repo’s fast!

Scan your repo’s without having to worry about having workflow files scattered across your org

• 1: Install the app
• 2: Veracode automatically forks a template workflow repo into your org if you install the app on all repo's
  • Or fork the official Veracode workflow repo yourself into your root folder and name it veracode
• 3: Add your credentials to this SINGLE repo
• DONE! Developers get their code scanned automatically and results are viewed as GitHub Checks!

Scan automatically – set it and forget it!

After installing the app and having the Veracode workflow repo sitting in your org, here’s what happens:

• Anytime a developer pushes code – a static, SCA, and container scan runs
• Anytime a developer merges code to your default branch – results are saved to the platform
• All these can be configured with a few keypresses to match your own security program!