Understanding Automatic Pull Request Support

Veracode Software Composition Analysis

This table lists which GitHub and GitLab projects support automatic pull requests.

Language Package Manager Files Modified in Pull Request
Java Maven pom.xml
Gradle build.gradle
Python Pip requirements.txt
Pipenv Pipfile and Pipfile.lock
Ruby Bundler Gemfile and Gemfile.lock
JavaScript NPM package.json and either npm-shrinkwrap.json or package-lock.json
Note: If neither npm-shrinkwrap.json nor package-lock.json are present in the project, the agent-based scan generates a package-lock.json file.
Bower bower.json
Objective-C CocoaPods Podfile and Podfile.lock
PHP Composer composer.json