About Supported Languages and Tools for Agent-Based Scans
Veracode Software Composition Analysis agent-based scanning integrates with many build systems. This section provides a list of the package managers and integrations that agent-based scanning supports.
Languages and Package Managers
Veracode SCA agent-based scanning identifies the open-source libraries that a project uses through a combination of package manager files and JAR identification. It supports these package managers:
- Maven
- Gradle
- Ant
- Bundler
- NPM
- Bower
- Yarn
- Composer
- pip
- SBT
- Maven
- Gradle
- Make
Objective C
- CocoaPods
- CocoaPods
- Go get (Go versions 1.15 and earlier)
- Go modules
- Govendor
- Godep
- Glide
- Trash
- NuGet
- yum (CentOS and RHEL containers only)
- pip
- NPM
- gem
- apk (Alpine containers only)
- apt (Debian and Ubuntu containers only)
For more details about the functionality available to each package manager, see Understanding the Agent-Based Scan Language Support Matrix.
Continuous Integration Tools
- Atlassian Bamboo
- Bitbucket Pipelines
- CircleCI
- Codeship Basic
- Codeship Pro
- GitLab CI
- Jenkins Shell
- Travis CI