We support tracking C# dependencies by using NuGet’s
packages.config or by using Paket’s
Older NuGet projects typically have a
packages.config file and no further action is required. If you have a more modern NuGet project you will typically want to use
packages.lock.json instead. This file is not generated by default, instead you first have to enable “repetable package restores” and then commit the generated file.
We will automatically scan these files for dependencies when you have done any of our integrations to your CI/CD pipeline.