NuGet Integration

NOTE: Before you begin, make sure that the relevant package manager is installed. For details, see Getting Started with the Unified Agent | Prerequisites

For projects based on package references in package files (PackageReference), the following flags setup is recommended:

• nuget.resolvePackagesConfigFiles=false

• nuget.resolveCsProjFiles=true

• nuget.resolveAssetsFiles=true

For projects based on packages.config, the following flags setup is recommended:

NOTE: It is highly recommended to use NuGet version 4.9 or higher in this case, as the Unified Agent will be able to generate the corresponding packages.lock.json file for better resolution.

• nuget.resolvePackagesConfigFiles=true

• nuget.resolveCsProjFiles=true

• nuget.resolveAssetsFiles=false

For both package manager formats, please set the nuget.runPreStep to true if the project is not built prior to the scan.

For more information, see the Configuration File & Parameters page.