[redrove]

My org almost bought Veracode for $1mil/yr. I'm happy they backed out last minute cause it looked like shit.

[cassianoleal]

I have used Veracode. Its SCA scan picks up fewer CVEs than whatever open-source tool the GitlabCI uses.