Contrast Visual Studio plugin
Use the Visual Studio plugin to see vulnerability information for instrumented applications from the Visual Studio IDE.
The plugin directs you to a line of code inside Visual Studio, and you can view related details in the Contrast application. This way developers can get application security feedback at the time of development for faster remediation.
The plugin supports Visual Studio versions 2017 (15.0 and later), 2019, and 2022.
To install, configure and use the Visual Studio plugin:
In Visual Studio, select Extensions.
In the new window, select Online from the left navigation panel.
Search for "Contrast", and select Download.
After you finish the download, restart the IDE.
In Visual Studio, go to Tools > Options.
In the search, enter "Contrast Security" and select Contrast Security - Connection.
In the Contrast Connection form, add the Contrast URL, Username, Service key, API key and Organization ID in the appropriate fields. You can find these in your profile.
Note
The API key must belong to the organization you want to access or you'll get authorization errors. After many failed attempts, this will lock your account.
Select Add. Visual Studio automatically tests the connection as it attempts to retrieve the organization from Contrast.
Select the organization in the Organizations field, and select OK.
In Visual Studio, go to View > Other Windows > Contrast Security Integration. You can also search for "Contrast Security Integration". This view shows a list of all the vulnerabilities from Contrast.
To filter the list, click the Filter icon at the top-left corner of the page.
In the window that appears, choose from multiple filters, including servers, applications, severity levels, states and last detected dates.
If you can't see your vulnerabilities list, select Refresh. To clear all selected filters, click the Clear icon. This also applies for Server and Application lists.
Note
If you can't see your vulnerabilities even after refreshing the list, you must filter your vulnerabilities. You must repeat this process after selecting a different organization in the Connection settings so that filters and vulnerabilities are refreshed correctly.
Under the Actions column, you can click the magnifying glass icon to see more information about the vulnerability. Use the icon to go to the Vulnerability page in Contrast.