Upload XML API

You can use the Veracode Upload API to create an application, upload binary modules, check prescan results, and submit a static scan request.

For example, you can call the Upload API from your build system to automatically send a new build to Veracode for analysis as soon as the build finishes.

The Veracode Upload API is a basic HTTPS-based request API that uses simple HTTP calls. For performance reasons, the Upload API automatically compresses large XML files using Gzip, if your requesting tool supports it. Veracode recommends that you use a user agent that supports Gzip to access the Upload API. To learn about how to use the Upload API, read the tutorial.

Prerequisites

Before using the Upload API, you must meet these prerequisites:

• An API service account with the Upload and Scan API role or a user account with one of these roles:
  • If using the Visual Studio extensions, you need the Upload and Scan API role to add a new application.
  • The Creator role can create an application profile.
  • The Submitter role can submit a scan request.
  • The Security Lead role can perform all tasks.
• API credentials
• HMAC authentication
• Ensure you access the APIs with the domain for your region.