Skip to main content

Prerequisites for Veracode Static for Visual Studio (Legacy)

Before you can use Veracode Static for Visual Studio, you must have:

  • Installed a supported version of Visual Studio listed on the Veracode-Authored Integrations page. If you have Visual Studio 2022 or 2019, there is a new Veracode Static for Visual Studio.

  • Generated Veracode API credentials and added them to an API credentials file.

  • One of these account types:

    • A user account with these roles:

      • Creator or Security Lead role to create builds of your applications with the necessary Veracode settings
      • Submitter role to upload scans to Veracode
      • Sandbox User role to create sandboxes to use with the extension
      • Reviewer role to check scan completion, propose mitigations, and import results to Visual Studio
      • Mitigation Approver role to approve mitigations

    • An API service account with these API roles:

      • Upload and Scan API to create application profiles, create sandboxes, and upload and scan applications
      • Upload API - Submit Only to submit scans
      • Mitigation API to mitigate flaws found in applications
      • Results API to download, import, and view Veracode results

      If you do not have an account with these roles, you receive access denial errors.

  • If you are using Visual Studio 2019 with .NET Framework version 4.8, you must disable an option in Visual Studio to ensure scan results display correctly in the IDE.