RickE (Community Member) asked a question.

Hi all, we have an older .NET application that uses packages.config to pull in JavaScript libraries through Nuget package management, can this be used in SCA scans or not? Can only find references to NPM in the docs.

  • Hello @RickE (Community Member)​,

     

    Not sure if you are using upload and scan or an agent, but can confirm that the upload and scan won't work. When using an agent, you might obtain the net info but it depends if the dotnet restore can generate the project.assset.json but Veracode doesn't support it and we cannot get JS info from it.

     

    As you stated in your post, Veracode JS is only supported on NPM, BOWER, and YARN.

     

    If you have further questions on this, I would advise opening a Support case for one of our SCA Engineers to answer them for you.

     

    Jason

    Veracode Support Engineer

    Expand Post
  • RickE (Community Member)

    Thanks for the response, we are currently using upload and scan so it's as I suspected with no support for packages.config, another argument for updating the application to a later Net version I think 😃

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.