Tim Jarrett tjarrettveracode

## veracode-api-access-curl.markdown

      
              1 file
            
          
              1 fork
            
          
              4 comments
            
          
              5 stars
            
          
                m9aertner
                / veracode-api-access-curl.markdown
            
            
              Created
              June 8, 2018 16:54
            
              
                Using curl and openssl to access the Veracode API endpoint
              
          
    Using curl and openssl to access the Veracode API endpoint


You can make requests to the Veracode service by sending an HMAC signature in the HTTP authorization header.

The mechanism is discussed on "Understanding API Access" https://help.veracode.com/reader/lsoDk5r2cv~YrwLQSI7lfw/H0S3580tt9sPFz3IgSMvnA
with a Java program as illustration. For an API wrapper in GO, see https://github.com/brian1917/vcodeHMAC.
For illustration and plain shell scripting on the command line, it's possible to compute the Authorization header using openssl.
Here's how: