Skip to main content

Install Veracode SCA Scan for VS Code

You install Veracode SCA Scan for VS Code from the VS Code Marketplace the same as any other extension.


You can only install the extension on one machine. If you install the extension on multiple machines, the extension might fail to authenticate with Veracode.

Before you begin

Before you begin, ensure you have:

  • Confirmed that you meet the prerequisites.
  • If you use a proxy to access Veracode, configured a proxy in your IDE, or you might see an authentication error after installing the extension. You cannot configure a proxy in the Veracode extension. For more information, see the Microsoft documentation.

To complete this task:

  1. Go to the VS Code Marketplace:
  2. Search for veracode.
  3. Select Veracode SCA Scan for VS Code.
  4. Select Install and follow the on-screen instructions to install the extension in VS Code.
  5. Restart VS Code to complete the installation.
  6. In VS Code, on the Activity Bar, select Veracode SCA Scan vs-code-side-bar.png.
  7. In the SETUP view, select Install Agent to install a local SCA agent. This SCA agent is specific to the extension and does not affect any other local SCA agents.

By default, the extension detects your Veracode API credentials file and authenticates with Veracode to confirm your credentials are valid. If you added the credentials file after installing the extension and the SCA agent, click Test Authentication to confirm your API credentials are valid. If your API credentials are invalid or expired, you can generate new credentials.