Veracode Pipeline Scan Extension for VS 2019

Allows for calling and viewing results of Veracode pipeline scans on Visual Studio.

Requires a Veracode Static Analysis license.

You can send questions and feedback in the Q&A section.

Instructions:

1. Java installed
2. A Veracode SAST subscription

Instructions:

1. After installing the extensions, you should have, under Tools->Options... a Veracode - Pipeline Scan option.
2. The Global Options contain your authentication configuration and the Scan Fail Criteria.
3. Project Options lets you setup project-specific configuration, mainly the build command and file to scan.
4. To allow for scanning, set Enabled to true.
5. To start a scan, call Tools->Veracode - Start Pipeline Scan.
6. The results will show up once the scan is completed.
7. In case of error, the popup window (non-blocking) will contain the error found.

• For more detailed error output, you can enable debug mode under Project Settings.