# C# - NuGet and Paket

Note

The support for this language is currently in beta. Vulnerability results may be less accurate than normal.

We support tracking C# dependencies by using NuGets packages.lock.json or packages.config or by using Pakets paket.lock file.

Older NuGet projects typically have a packages.config file and no further action is required. If you have a more modern NuGet project you will typically want to use packages.lock.json instead. This file is not generated by default, instead you first have to enable repetable package restores (opens new window) and then commit the generated file.

We are not currently supporting .csproj files. In order to generate the packages.lock.json file in your C# project, you need to set the "RestorePackagesWithLockFile" property in MSBuild. For more instructions, see this (opens new window) article.

We will automatically scan these files for dependencies when you have done any of our integrations to your CI/CD pipeline.