Visual Studio
The JFrog Visual Studio Extension scans project dependencies with JFrog Xray and shows vulnerability and license findings in Visual Studio. You can review component details and fixed versions in the JFrog window before those dependencies become part of your product.
Note
This extension is the JFrog Security scanner for Visual Studio. It is not the JFrog Agent Plugin used with AI coding assistants in Visual Studio Code. For more information, see IDEs.
Key Capabilities
- Software Composition Analysis (SCA) for NuGet dependencies, and for npm in Visual Studio 2022
- Severity filters in the JFrog window
- License information for scanned components
- In Visual Studio 2022, scan policy based on all vulnerabilities, a JFrog Project, or Xray Watches
Before You Begin
- JFrog Xray 3.29.0 or later
- Visual Studio 2017, 2019, or 2022
- A JFrog Platform user with permission to view components in Xray
- For NuGet projects, restore packages before you scan
- For npm projects in Visual Studio 2022,
npmon yourPATH, and apackage-lock.jsonfile in the project
Source Code
The JFrog Visual Studio Extension source code is available on GitHub.
In This Section
Updated 29 days ago
Did this page help you?