Static-only IDE plugins
Veracode Static-only IDE plugins and extensions are being retired and reach end of life on December 31, 2026.
To continue scanning code in your IDE, migrate to the Veracode Scan plugins and extensions, which support:
- Static Application Security Testing (SAST)
- Software Composition Analysis (SCA)
- Veracode Fix
Supported IDEs:
The following IDE plugins enable you to upload your code to Veracode for Static Analysis. You can then access the results in your IDE or from the Veracode Platform.
To perform Static Analysis and SCA scans, and use Veracode Fix, in your IDE, we recommend migrating to the Veracode Scan plugins and extensions.
To view and fix flaws directly in your code, see Veracode Greenlight.
Veracode APIs and integrations require access to specific Region Domains, depending on the region for your Veracode account. Contact your IT team to ensure the correct domains for your region are on the allowlist for your organization. Also, ensure that there is one-way communication on port 443 to the domain for the REST APIs. Refer to the complete list of domains and IP addresses to add to your allowlist.