veracode package discover
Detects toolchains in your project and identifies any changes or upgrades needed to create scannable artifacts. It generates and updates the veracode.yml file with supported modules to reduce manual setup and improve scan accuracy. To learn more, see About package discover.
note
veracode package discover currently supports MSBuild (.NET) and Maven build tools.
Usage
./veracode package discover [path] [flags]
Flags
| Flag | Description |
|---|---|
-d, --dry-run | Runs the command without writing changes to the veracode.yml file. |
-f, --format <string> | Specifies the output format. Options: json, text, or yaml. Default is text. |
-h, --help | Displays help information for the discover command. |
-no, --update-check | Disables the automatic version update check. |
-v, --verbose <count> | Increases output verbosity |
Examples
To detect Maven modules in the current directory and generate or update veracode.yml, run:
./veracode package discover /path/to/mavenProject
To detect .NET SDK-style or classic projects and generate or update veracode.yml, run:
./veracode package discover /path/to/dotnetProject
To display the configuration that would be written to veracode.yml in JSON format without modifying the file, run:
./veracode package discover . --dry-run --format yaml