mdclarkson Goto Github PK

vcodeflowdocknotifier

Utility designed to be run in a build process after a Veracode scan to notify a Flowdock flow that the scan completed. Optional to include policy compliance info in notification.

vcodemitigationexpire

Utility designed to be run on a regular cadence (e.g., weekly cron job) to expire mitigations. The types of mitigations, expiration references, and other settings are controlled in a JSON config file.

vcodescaextractor

A utility to extract SCA history from a Veracode account.

vcodeslacknotifier

Utility designed to be run in a build process after a Veracode scan to notify a Slack channel that the scan completed. Optional to include policy compliance info in notification.

veracode-badge

a deployment to produce badges for repositories decorations

veracode-cli

veracode-cli-1

veracode-jenkins-verademo

veracode-mitigation-copier

Copies mitigations from one Veracode profile to another if it's the same flaw based on the following flaw attributes: issueid, cweid, type, sourcefile, and line. The script will copy all proposed and accepted mitigations for the flaw. The script will skip a flaw in the copy_to build if it already has an accepted mitigation.

veracode-offboard

Deactivates a provided list of users on the Veracode Platform.

veracode-pdf-reports

Pulls latest PDF reports from Veracode for recent Static and Dynamic scans

veracode-pipeline-mitigation

Retrieves findings with APPROVED mitigations from an application's policy scan (or sandbox) and creates a baseline file for Pipeline Scan. Mitigations in a "proposed" state will not be retrieved.

veracode-python-api_credentials_expiry-example

veracode-sca-json-visual-report

veracode-scan-counts

Identify Veracode application profiles with one or more static scans in an incomplete state.

veracode-stats

Generate interesting statistics for a Veracode account

veracode-to-splunk

Get more detailed information from the veracode API.

veracode-user-bulk-role-assign

Uses the Veracode Identity API to add roles (Security Labs User, Greenlight IDE User, or eLearning) to existing users.

veracode-workspace-auto-create

Uses the Veracode Agent Based Scan API and other Veracode REST APIs to automatically create a workspace for application profiles in a Veracode organization.

veracode-yml-sample-pipelines

repository has examples of yml files for AzureDevOps, Jenkins, GitLab, Github Actions, CircleCI

veracodereportconverter-portable

(.NET Core) Takes a Veracode Detailed XML report and generates a CSV file. Designed for portability

veraconsole

veracustomtriage

A Veracode results processing/augmentation tool to enhance the results with extra info (company policies, training, insights etc) which then get put together into a remediation plan.

verapi

Veracode API instrumentation for SDLC automatic SAST Scan

vimium

The hacker's browser.

xepor

Xepor, a web routing framework for reverse engineers and security researchers, brings the best of mitmproxy & Flask

zappa

Serverless Python