GitHub Integration language support matrix
The following table lists the languages, package managers, and artifacts that the Veracode GitHub Integration supports.
If the package manager artifact contains direct dependencies only, Veracode does not identify vulnerabilities and license risks in transitive dependencies.
| Language | Package manager | Artifacts | Supported? |
|---|---|---|---|
| Java | Ant | n/a | No |
| Java | Gradle | build.gradle | No. Coming soon |
| Java | Maven | pom.xml | Yes |
| JavaScript | Bower | n/a | No |
| JavaScript | NPM | package-lock.json, or npm-shrinkwrap.json | Yes |
| JavaScript | Yarn | package.json and yarn.lock | Yes |