Skip to main content

Install Veracode Static for Visual Studio

note

This topic is for the new Veracode Static for Visual Studio released April 2022. For the legacy versions of Veracode Static for Visual Studio, see Veracode Static for Visual Studio (Legacy).

You can install the extension from the Visual Studio Marketplace.

Before you begin:

  • You must have Veracode API credentials to access Veracode, and create an API credentials file on Windows.

  • You must have one of these account types:

    • A user account with these roles:
      • Creator or Security Lead role to create builds of your applications with the necessary Veracode settings
      • Submitter role to upload scans to Veracode
      • Sandbox User role to create sandboxes to use with the extension
      • Reviewer role to check scan completion, propose mitigations, and import results to Visual Studio
      • Mitigation Approver role to approve mitigations
    • An API service account with these API roles:
      • Upload and Scan API to create application profiles, create sandboxes, and upload and scan applications
      • Upload API - Submit only to submit scans
      • Mitigation API to mitigate flaws found in applications
      • Results API to download, import, and view Veracode results

  • If you have Veracode Static for Visual Studio 2015-2019 version 4.3 or earlier installed, you must uninstall it or update it to version 4.3 before installing this extension. You can run both version 4.3 and greater and this extension in the same IDE.

To complete this task:

Download and install the extension from the Visual Studio Marketplace: