Python helper library for working with the Veracode APIs. Handles retries, pagination, and other features of the modern Veracode REST APIs.

Retrieves findings with APPROVED mitigations from an application's policy scan (or sandbox) and creates a baseline file for Pipeline Scan. Mitigations in a "proposed" state will not be retrieved.

Unofficial list of interesting projects that build on the Veracode APIs.

Copies mitigations from one Veracode profile to another if it's the same flaw based on the following flaw attributes: issueid, cweid, type, sourcefile, and line. The script will copy all proposed and accepted mitigations for the flaw. The script will skip a flaw in the copy_to build if it already has an accepted mitigation.

Identify Veracode application profiles with one or more static scans in an incomplete state.

Identifies and optionally rejects self-approved mitigations on policy-violating findings.

RestSharp Authenticator for Veracode HMAC based API authentication

Uses the Veracode Agent Based Scan API and other Veracode REST APIs to automatically create a workspace for application profiles in a Veracode organization.

Please use the fork of this project at https://github.com/veracode/veracode-archer

Download Historic Reports using Veracode API

Deactivates a provided list of users on the Veracode Platform.

Get a CSV report of the licenses for the libraries in your Veracode SCA Agent workspace.

Onboarding tool that provisions a new team, API User, application profile, and SCA Agent workspace in Veracode so that a team can get working quickly.