Skip to content
Notifications
Clear all

Has anyone successfully integrated Veracode SAST with a monorepo?

1 Posts
1 Users
0 Reactions
12 Views
(@ashp99)
Honorable Member
Joined: 2 months ago
Posts: 377
Topic starter   [#25306]

We're evaluating Veracode SAST and our main codebase is a large TypeScript monorepo (using Nx). The vendor docs are a bit generic on monorepo setups.

Has anyone here done this integration successfully? I'm especially curious about:

* **Scan configuration:** Did you treat it as one massive project or set up separate Veracode "apps" per logical service/library?
* **Build process:** How did you handle the build step for the upload? Did you need to build the entire monorepo or just specific projects?
* **Performance:** Were scan times reasonable, or did they balloon?

Any gotchas or tips on the pipeline setup would be a huge help. Looking for real-world workflow notes, not just theory. 😅


data over opinions


   
Quote