Veracode CLI

by Veracode, Inc.v2.51.1

Last updated Jul 24, 2026

Perform various actions for testing the security of your applications

Install with winget

$ winget install --id Veracode.CLI --exact --version 2.51.1

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For IT teams

Deploy this app to your whole fleet with Pckgr RMM.

App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.

Free for up to 5 devices.

About

You use the Veracode CLI to run security scans of development containers. The CLI helps developers prevent comprehensive exploits before runtime and provides visibility into their container pipeline security posture.

Installers · v2.51.1

Architecture	Type	Scope	Install	Download
x86	ZIP archive	-		Direct
x64	ZIP archive	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

2 known CVEs via NVD

medium5.5Fix in v23.3.19.0CVE-2023-25722affects before 23.3.19.0Mar 28, 2023
A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jen...
Vendor advisory
medium6.5Fix in v23.3.19.0CVE-2023-25721affects before 23.3.19.0Mar 28, 2023
Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to vie...
Vendor advisory

Source: NVD, updated 2h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Pckgr RMM flags vulnerable devices and pushes the patched version automatically.

Frequently asked questions

How do I install Veracode CLI on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Veracode.CLI --exact --version 2.51.1. winget downloads the installer from Veracode, Inc. and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install Veracode CLI silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id Veracode.CLI --exact 2.51.1 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall Veracode CLI via winget?

Run: winget uninstall --id Veracode.CLI --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Veracode CLI's Apps & Features entry.

Is Veracode CLI free?

Veracode CLI is distributed under Proprietary. Refer to the publisher (https://docs.veracode.com/r/Install_the_Veracode_CLI) for the full license terms - Wingetly itself does not charge for installation.

Does Veracode CLI work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Veracode CLI directly from the publisher.

How do I keep Veracode CLI up to date?

Run winget upgrade --id Veracode.CLI --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Veracode CLI from microsoft/winget-pkgs.

Recent versions

2.51.1latest
2.51.0
2.50.0
2.49.0
2.48.0
2.47.0
2.46.0
2.45.0
2.44.0
2.43.0