Before you can use Veracode Static for Visual Studio, you must have:
- Installed a supported version of Visual Studio listed on the Veracode-Authored Integrations page. If you have Visual Studio 2022 or 2019, there is a new Veracode Static for Visual Studio.
- Generated Veracode API credentials and added them to an API credentials file.
-
One of these account types:
- A user account with these roles:
- Creator or Security Lead role to create builds of your applications with the necessary Veracode settings
- Submitter role to upload scans to Veracode
- Sandbox User role to create sandboxes to use with the extension
- Reviewer role to check scan completion, propose mitigations, and import results to Visual Studio
- Mitigation Approver role to approve mitigations
- An API service account with these API roles:
- Upload and Scan API to create application profiles, create sandboxes, and upload and scan applications
- Upload API - Submit Only to submit scans
- Mitigation API to mitigate flaws found in applications
- Results API to download, import, and view Veracode results
If you do not have an account with these roles, you receive access denial errors. - If you are using Visual Studio 2019 with .NET Framework version 4.8, you must disable an option in Visual Studio to ensure scan results display correctly in the IDE.
- A user account with these roles: