Obtain the Pipeline Scan files

You can obtain the latest version of the Pipeline Scan as a ZIP archive from Veracode or as a container image from Docker Hub.

To complete this task:

1. Go to one of these locations:

   • Docker Hub to use a Docker image. Veracode recommended.
   • Veracode Downloads to download a ZIP archive.

2. If you downloaded the ZIP archive, extract the contents to a local directory.

   The ZIP archive contains the pipeline-scan.jar, which includes all dependencies except the required Java 8 compatible JRE, and a README with detailed code examples. You add the full path to pipeline-scan.jar in your pipeline scripts for running a Pipeline Scan. The provided script examples include steps to both download and extract the ZIP as part of the Pipeline Scan job.