Veracode Scan for VS Code

To use this extension you must have a Veracode account.

Overview

Veracode Scan for VS Code is an extension for the VS Code IDE that integrates Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Veracode Fix into your Software Development Lifecycle (SDLC). From within your IDE, you can:

• Run a Static Analysis of your project to detect flaws in your code and use the provided remediation guidance to resolve them.

• Use Veracode Fix to remediate flaws by applying suggested fixes.

• Perform SCA agent-based scans to detect vulnerabilities in open-source libraries and the risk level of third-party licenses.

For instructions on installing and using the extension, go to the Veracode Documentation and search for Use Veracode in your IDE.