Skip to main content

Regenerate Veracode SCA agent tokens

To connect to your organization during scanning, Veracode SCA uses an agent authentication token, which acts as a password.

If another user gets access to your token, that person can use the Veracode SCA agent as if they were you. For workspace agent tokens, they can scan into the workspace linked to that agent, which taints your data. For organization-level agent tokens, if they can identify a workspace in your organization, they can scan into that workspace. Keep your token private.

You may want to regenerate this token if you believe it was compromised. Regenerating a token will invalidate the old token. Any agents using this token will no longer be able to scan.

For information on regenerating agent tokens with the SCA REST API, see Using the Veracode SCA REST API.

Before you begin:

To regenerate an organization-level agent token, you must have the Security Lead role.

To regenerate a workspace agent token, you must have the Security Lead, Workspace Administrator, Workspace Editor, or Submitter role.

To complete this task:

  1. In the Veracode Platform, navigate to the Agents page at either the workspace or organization level.

  2. Select an agent.

  3. Click Regenerate Token.

    A new token displays. If you close the page, the token disappears and you must generate it again.

  4. Copy this token and paste it into the relevant configuration file.

  5. Update your environment variables with the new token.