Install Veracode Static for Visual Studio

You can install Veracode Static for Visual Studio for use with Visual Studio 2019 or 2022. There are separate extensions for each IDE.

You can install the extension from the Visual Studio Marketplace.

Before you begin:

Before you begin, you must have:

• Installed a supported version of Visual Studio and ensured your code meets the packaging requirements.

• Stored your API credentials in an API credentials file or in environment variables.

• Ensured you have one of these account types:

  • A user account with the following roles:
    • Creator or Security Lead role to create builds of your applications with the necessary Veracode settings
    • Submitter role to upload scans to Veracode
    • Sandbox User role to create sandboxes to use with the extension
    • Reviewer role to check scan completion, propose mitigations, and import results to Visual Studio
    • Mitigation Approver role to approve mitigations
  • An API service account with the following API roles:
    • Upload and Scan API to create application profiles, create sandboxes, and upload and scan applications
    • Upload API - Submit only to submit scans
    • Mitigation API to mitigate flaws found in applications
    • Results API to download, import, and view Veracode results

• If you use a proxy to access Veracode, ensure you have configured a proxy in your IDE. You cannot configure a proxy in the Veracode extension. For more information, see the Microsoft documentation.

• If you have Veracode Static for Visual Studio 2015-2019 version 4.3 or earlier installed, you must uninstall it or update it to version 4.3 before installing this extension. You can run both version 4.3 and greater and this extension in the same IDE.

To complete this task:

Download and install the extension from the Visual Studio Marketplace:

• Visual Studio 2019
• Visual Studio 2022