Use Veracode in your IDE

Before checking in your code, you can scan your project, review security findings, triage the results, and fix findings, all from within your IDE.

Next-generation IDE plugins

Veracode is actively updating the following plugins with new features and functionality, including auto-packaging and Veracode Fix.

Static Analysis, SCA, and Veracode Fix

VS Code

SCA only

IntelliJ and PyCharm

Legacy IDE plugins

Veracode is only updating the following plugins for maintenance releases. To use the latest features and functionality with an improved user experience, Veracode recommends that your teams move to the next-generation IDE plugins.

Static Analysis only

• Eclipse
• IntelliJ and Android Studio
• Visual Studio (New)
• Visual Studio (Legacy)

Greenlight

Veracode is gradually deprecating the Greenlight plugins in favor of the next-generation IDE plugins.

To scan small packages in your IDE as you code, see Veracode Greenlight. Greenlight is not available in the European Region.

note

Veracode APIs and integrations require access to specific Region Domains, depending on the region for your Veracode account. Contact your IT team to ensure the correct domains for your region are on the allowlist for your organization. Also, ensure that there is one-way communication on port 443 to the domain for the REST APIs. Refer to the complete list of domains and IP addresses to add to your allowlist.