Storyline 360 and Veracode Scan

We have a client who is requiring a Veracode scan of a course we are building in Storyline 360. Does anyone have any familiarity with Veracode scans and Storyline? If so, can you share any information/experience you have had with this. I have not had to do this for a client before and wonder what I'm getting into. Essentially it is asking me as the Storyline user to verify that the code that is output is secure. Seems crazy to me.