Python helper library for working with the Veracode APIs. Handles retries, pagination, and other features of the modern Veracode REST APIs.

Retrieves findings with APPROVED mitigations from an application's policy scan (or sandbox) and creates a baseline file for Pipeline Scan. Mitigations in a "proposed" state will not be retrieved.

Copies mitigations from one Veracode profile to another if it's the same flaw based on the following flaw attributes: issueid, cweid, type, sourcefile, and line. The script will copy all proposed and accepted mitigations for the flaw. The script will skip a flaw in the copy_to build if it already has an accepted mitigation.

Helps you to enumerate active committers in specified GitHub repositories.

Identify Veracode application profiles with one or more static scans in an incomplete state.

Produces a PDF report summarizing the security state of a Collection in the Veracode Platform.

Get a summary of all the information about dynamic flaws for an application to support remediation.

generates a human-readable .HTML file from the Veracode pipeline verification results.json file

Generates a Software Bill of Materials in CycloneDX JSON Format from Veracode SCA Agent results.

Copies mitigations from one Veracode profile to another if it's the same flaw based on the following flaw attributes: issueid, cweid, type, sourcefile, and line. The script will copy all proposed and accepted mitigations for the flaw. The script will skip a flaw in the copy_to build if it already has an accepted mitigation.

Author: Thomas Saekao - @tsaekao | Some helpful scripts for Veracode - Fork to maintain

Export a list of applications and all the profile properties to CSV.

Identifies and optionally rejects self-approved mitigations on policy-violating findings.

Created by Justin Bukstel (@justinbukstel). Inspired by the work done by Brian Pitta (@brian1917)

Simple script that demonstrates how to use veracode-api-py to create a Dynamic Analysis based on simple input.

Onboarding tool that provisions a new team, API User, application profile, and SCA Agent workspace in Veracode so that a team can get working quickly.

Author: Jin Mok (@m4ckdaddy) | Veracode Pipeline scan via the pipeline scan rest endpoint. This script was created with the intention to remove the 200 mb file size limit caused by the limitation in the file chunking that occurs in the wrapper.

Sets Veracode sandboxes to auto-recreate on expiration, for individual applications or across a whole account.