Import scan results from the Veracode Platform into Visual Studio (Legacy)

You can download and import scan results from the Veracode Platform and view them in your IDE. You can also download and import results with the Results API.

Before you begin:

• You meet the prerequisites for Veracode Static for Visual Studio (Legacy).
• For Visual Studio 2019, you have configured a rendering option. If you do not configure this option, the scan results might not display in Visual Studio.

To complete this task:

1. In the Veracode Platform, from the left navigation menu, select Results.

2. Select Download Report and select Detailed XML Export (XML) from the dropdown menu.

3. Select Download. The report downloads as a ZIP file with the XML document and the associated XSD schema.

4. In Visual Studio, select Veracode Static > View Results.

5. Select Browse. Then, select the XML results file to open.

6. Select Open.

   The scan results open in the Results window. In the Results window you can perform these tasks to review the results while working in your development project:

   • Filter or search for discovered flaws.
   • Double-click a flaw to open the source file, if the solution is open, and place your cursor on the line that contains the flaw.
   • Right-click a flaw and select to view the related call stacks, mitigations, and other details.

Next steps:

Mitigate findings from within Visual Studio.