+
Visual Studio Extension
Accelerate secure development with the Sonatype extension for Microsoft Visual Studio. This plugin integrates directly into your Visual Studio, enabling you to automatically surface and remediate open source risk without leaving your integrated development environment (IDE).
Works With: 
Open Source Intelligence, Right in Your IDE
Get real-time insights into open source component risk during development with the Visual Studio integration. The extension scans your project files as you code and displays security, license, and policy information, all within the Visual Studio IDE.
With Sonatype Lifecycle running in the background, the Visual Studio extension automatically analyzes dependencies declared in your project files (e.g., pom.xml, package.json, requirements.txt) and flags components that violate your organization’s policies. Developers get immediate visibility into component quality, known vulnerabilities, and license compliance, without interrupting their coding flow.
Combining the power of Sonatype Lifecycle with Visual Studio helps development teams shift security left and make informed decisions earlier in the software development life cycle (SDLC).
Visual Studio Integration Documentation
|
