Creating a Veracode Build

IDEs

The Veracode Visual Studio Extension enables you to create and prepare a build of your application that you can upload to Veracode for scanning.

When you create a new build of your application, the Veracode extension creates the build with the necessary compilation and linker settings as outlined in the Veracode Compilation Guide. To create the new Veracode build, open your project solution in Visual Studio, and go to the Veracode menu and select Build with Veracode Settings. This action temporarily changes the compilation and linker settings of the source build configuration in preparation for uploading to Veracode. By default, the extension builds your code using the active build configuration.
Note: Visual Studio 2017 does not support the Build with Veracode Settings action for ASP.NET Core 1.x or 2.0 projects. If you want to build an ASP.NET Core 1.x or 2.0 project in Visual Studio 2017, you must follow the instructions in the Compilation Guide.

After the build completes, it does not automatically precompile any web application projects (WAP) or website projects that are part of the solution. Precompilation translates ASP.NET pages and controls into DLL files with debug information for analysis by Veracode, storing the precompilation output in $(SolutionDir)\PrecompiledWeb. Therefore, it is recommended that you select the automatic precompilation option. Go to Veracode > Options > Precompilation and select Precompilation. If you choose to not to compile automatically, you can precompile manually by selecting Publish/Precompile Web Projects from the Veracode menu.

You must correct all precompilation errors before you can successfully upload your binaries. Veracode cannot upload and scan an application that does not build successfully. You must also fix precompilation errors in code-behind pages, which are pages that do not compile until the web site or application is executed by a server or is deployed to a target folder.
Note: To use the Veracode Visual Studio Extension to precompile web projects that target a 64-bit architecture, you must be using the 64-bit version of Windows.



To issue a clean solution command that deletes all artifacts and creates a new build, select Rebuild with Veracode Settings from the Veracode menu.