Understanding Greenlight Technical Requirements

Veracode Greenlight

Veracode Greenlight for Visual Studio is designed to scan at the file level. For project-level scans, use Veracode Static Analysis.

Greenlight for Visual Studio supports .NET and the .NET platforms and frameworks listed in Compilation Instructions for .NET. Greenlight for Visual Studio can only scan:
  • CS, CS, VB, JS, ASCX, ASHX, or ASPX files that are a part of a .NET project that compiles correctly.
  • JavaScript embedded in the following file types: HTM, HTML, JS, TS.

The exception is that Greenlight for Visual Studio does not support .NET Core 1.0 or .NET Core 1.1 (XPROJ) projects. If you try to scan a .NET Core 1.0 or Core 1.1 file, you get an error message informing you that you are trying to scan an unsupported language. Greenlight for Visual Studio does support .NET Core 2.0 projects (CSPROJ or VPROJ). See Compilation Instructions for .NET.

Note: The Veracode Static Analysis engine does support .NET Core 1.0 and Core 1.1 applications. However, the limitation is that the .NET Core 1.0 and 1.1 project files in the Visual Studio client are not the standard CSPROJ or VBPROJ file types.

Veracode Greenlight uses the following two certificates that are signed by a certificate authority: downloads.veracode.com and api.veracode.com.

Veracode Greenlight for Visual Studio plugin only supports Visual Studio 2015 or Visual Studio 2017 projects of 10MB or smaller and scans the CS, VB, JS, ASCX, ASHX, or ASPX file selected in the project. C/C++ files are not supported at this time.


Before you begin to configure and use the extension, ensure you meet the following technical requirements:
  • You must have either of the following IDEs installed:
    • Visual Studio 2015 installed on Windows 7
    • Visual Studio 2017 installed on Windows 7 or Windows 10
  • Your IDE is connected to the public internet.
  • If you use a proxy, you have configured your Visual Studio proxy settings.