A Veracode Static Analysis Agent to analyze the application codebase, identify potential security vulnerabilities, assess their severity, and recommend secure coding fixes.
Tasks
Analyze the application source code for security vulnerabilities.
Identify any vulnerability such as SQL injection, cross-site scripting (XSS), hardcoded secrets, insecure authentication, and improper input validation.
Classify findings by severity: Critical, High, Medium, and Low.
Provide the affected file names, line numbers, and a brief explanation for each finding.
Recommend remediation steps following secure coding best practices.
Where possible, suggest corrected code snippets for identified vulnerabilities.
Reanalyze the updated code to verify that the fixes address the reported issues.
Can be run on source code to review and share the vulnerabilities feedback.
Expected Outcome
Generate a security assessment report containing identified vulnerabilities, severity levels, affected code locations, remediation recommendations, and verification results and then do the fixing.
Acceptance Criteria
Security findings are clearly documented and prioritized.
Each finding includes actionable remediation guidance.
Suggested fixes preserve the application's intended functionality.
No code changes are applied without authorization.
The final report summarizes unresolved risks and verified fixes.
A Veracode Static Analysis Agent to analyze the application codebase, identify potential security vulnerabilities, assess their severity, and recommend secure coding fixes.
Tasks
Analyze the application source code for security vulnerabilities.
Identify any vulnerability such as SQL injection, cross-site scripting (XSS), hardcoded secrets, insecure authentication, and improper input validation.
Classify findings by severity: Critical, High, Medium, and Low.
Provide the affected file names, line numbers, and a brief explanation for each finding.
Recommend remediation steps following secure coding best practices.
Where possible, suggest corrected code snippets for identified vulnerabilities.
Reanalyze the updated code to verify that the fixes address the reported issues.
Can be run on source code to review and share the vulnerabilities feedback.
Expected Outcome
Generate a security assessment report containing identified vulnerabilities, severity levels, affected code locations, remediation recommendations, and verification results and then do the fixing.
Acceptance Criteria
Security findings are clearly documented and prioritized.
Each finding includes actionable remediation guidance.
Suggested fixes preserve the application's intended functionality.
No code changes are applied without authorization.
The final report summarizes unresolved risks and verified fixes.