veracode-api-signing

Easily sign any request destined for the Veracode API Gateway

veracode-api-signing v26.5.0 727.8K downloads/30d#5,215 on PyPI

Permissive license MIT Active released 2026-05-27

What it is and what it does

Veracode-api-signing is a Python library that automates the signing of HTTP requests sent to Veracode's API Gateway. It handles the cryptographic authentication required by Veracode's API, allowing developers to make authenticated API calls without manually constructing signed headers. The package is built on top of standard HTTP libraries (requests, httpie) and integrates with common Python tooling.

The library is maintained as production-stable and supports modern Python versions (3.10 through 3.14). It's designed as a utility for developers integrating with Veracode's security scanning and analysis APIs, reducing the friction of implementing API authentication by hand.

Use it for:

Automating Veracode API calls from CI/CD pipelines without manually constructing authentication headers
Building custom security scanning workflows that interact with Veracode's platform programmatically
Integrating Veracode security checks into application deployment automation

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Signs HTTP requests destined for the Veracode API Gateway, handling authentication credentials and request signing automatically.

Yes, if you are integrating with Veracode's API. The package is actively maintained, has low install friction, carries a permissive MIT license, and has no known vulnerabilities. It's a straightforward utility for a specific use case—Veracode API authentication—and is worth installing only if that's your need.

Install

veracode-api-signing on PyPI

pip

pip install veracode-api-signing

uv

uv add veracode-api-signing

poetry

poetry add veracode-api-signing

Installing veracode-api-signing

Before you install

Low friction installation with a pure Python wheel. Active maintenance status with a recent release (79 days ago). Depends on common, stable libraries: docopt, httpie, pip, requests, and setuptools.

License in practice

MIT license is permissive, allowing use in commercial and proprietary projects with minimal restrictions beyond attribution.

Quickstart

pip install veracode-api-signing

import veracode_api_signing
# Use with requests or httpie to sign Veracode API calls

Requires Python 3.10 or later; depends on requests library for HTTP functionality.

Verify before relying

Whether this package is intended for direct use or primarily as a plugin/dependency for other Veracode tools
Specific authentication flow details and whether it integrates with existing HTTP clients or requires wrapper code

Package facts

License	MIT (permissive)
Python support	supports the current Python release (>=3.10)
Install friction	low — pure-Python wheel
Runtime dependencies	5 — docopt, httpie, pip, requests, setuptools
Maintenance	actively maintained — 79 days since the last release
First released	2019-09-05
Downloads	727,835/month — #5,215 on PyPI (30-day window, as of 2026-08-14)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-14)

Evidence: veracode_api_signing-26.5.0-py2.py3-none-any.whl

Keywords: veracode-api-signing

Development Status :: 5 - Production/StableEnvironment :: PluginsIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseNatural Language :: EnglishProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Internet :: WWW/HTTPTopic :: SecurityTopic :: Software Development :: Libraries :: Python ModulesTopic :: Utilities