Preparing for the Veracode Vulnerability Integration

A successful Veracode Vulnerability Integration requires planning and the execution of pre-integration tasks. Prepare for the integration by performing these tasks. The Veracode Vulnerability Integration assumes that you are familiar with the Veracode product and API.

Avant de commencer

The Common Weakness Enumeration (CWE) integration is also used by Application Vulnerability Response and should be running prior to installing and configuring the Veracode Vulnerability Integration. It is installed with Vulnerability Response, by default.

Remarque :

NIST Vulnerability Database (NVD) data is not necessary to install the Veracode Application Vulnerability Integration, however they provide enrichment and would be useful to have. For information on NVD, see Importing data with the NVD and CWE integrations and managing third-party libraries.

There is a configured run-as user for each integration record. The default value for this user is VR.System. Do not change this value.

Role required: App-Sec Manager group

Pourquoi et quand exécuter cette tâche

Remarque :

Before running the integration, make any necessary configuration changes based on your requirements.

Validate your instance sizing based on the number of application vulnerable items you expect to import. An undersized instance can lead to long load times. If you do not know the size of your instance, contact Customer Service and Support.

The Veracode Vulnerability Integration requires an API id and API key.

Procédure

To create the API ID and key credentials:

1. Log in to the Veracode Platform.
2. Go to the user account menu and select API Credentials.
3. Click Generate API Credentials.
4. Record your credentials for later use.