Quick Reference Packaging Guide

Compilation Guide

The Compilation Guide provides detailed compilation and packaging steps to allow optimal analysis for all of the languages and frameworks that Veracode Static Analysis supports. The following list provides a high-level overview of the packaging requirements for some of the most popular supported languages.

Java
Upload WAR or EAR files with debug symbols.
.NET
Generate a debug build, zip the built files, and upload the ZIP file.
  • If the application contains ASP files, publish the website to a directory, zip the published directory, and upload the ZIP file.
  • If the application contains TypeScript files, zip the source TypeScript files and upload them separately.
JavaScript and TypeScript
Upload ZIP files, including the node_modules folder, if applicable.
PHP
Zip the application source files and upload the ZIP file.
Scala
Upload JAR files with debug symbols.
Groovy
Upload JAR or WAR files with debug symbols.
Kotlin
Upload JAR or WAR files with debug symbols.
Apex
Zip the application source files and upload the ZIP file.
PL/SQL
Zip the application source files and upload the ZIP file.
Classic ASP
Zip the application source files and upload the ZIP file.
Perl
Zip the application source files and upload the ZIP file.
Python
Zip the application source files and upload the ZIP file.
Android
Generate a debug build and package it as an APK file.
Cordova
Upload a compiled APK or IPA file.
React Native
Zip the application source files and upload the ZIP file, or upload a compiled APK or IPA file.
Ionic
Zip the application source files and upload the ZIP file.
C++ (Red Hat Linux)
Upload a debug build compiled with the -gdwarf-2 -g3 -O0 -fno-builtin flags using GCC.
Visual C++
Upload a debug build compiled with the /Zi /Od /GS- /MTd /link /INCREMENTAL:NO /DEBUG:FULL flags.
COBOL
Extract source code files from mainframe system as UTF-8 encoded text files, zip the extracted files, and upload the ZIP file.
RPG
Extract source code files from mainframe system as UTF-8 encoded text files, zip the extracted files, and upload the ZIP file.
Virtual Basic 6
Zip the application source files and upload the ZIP file.