I need to enable veracode for my application, so just wanted to know can we run the veracode for every pull request/merge request only for modified files? or scanning only once in a day on entire code is sufficient?
There are 20 developers are working my team and getting multiple merge request at a time sometimes, so is there any issue if we submit multiple scans to veracode at a time?
Thanks