Skip to main content

Transact-SQL packaging

Your Transact-SQL (T-SQL) applications must meet specific packaging requirements before you can submit them for scanning.

See Supported languages and platforms for instructions for other platforms.

Supported T-SQL versions

LanguageSupported versions
T-SQL15.x and earlier (SQL Server 2019)

Packaging guidance

Veracode requires source files for the T-SQL application. Veracode Static Analysis supports all T-SQL constructs.

Veracode only scans T-SQL files with the SQL extension.

Veracode Static Analysis does not:

  • Analyze general SQL scripts or queries
  • Support middleware libraries or RAD tool libraries

Upload to Veracode a ZIP archive containing all T-SQL code. Files must be UTF-8 encoded. For clearest, most actionable results, T-SQL procedures should be in separate files within the archive.

  • Do not include third-party packages.
  • Do not upload T-SQL source files without placing them in an archive.