Static analysis for vibe coders. Scan any repository for security, resilience, ops, dependency, and configuration issues — without leaving your editor.
Features
- One-click scan — Run
Seaworthy: Scan Workspacefrom the Command Palette - Problems panel integration — Findings appear as diagnostics with severity levels
- HTML report viewer — Rich, themed report rendered inside VS Code
- Terminal output — Full plaintext results in the Output panel
- Pro tier support — Unlock ~115 checks with LLM-assisted deep analysis
Usage
- Open a workspace or folder in VS Code
- Open the Command Palette (
Ctrl+Shift+P/Cmd+Shift+P) - Run Seaworthy: Scan Workspace
- View findings in the Problems panel or open the HTML report
Configuration
| Setting | Description |
|---|---|
seaworthy.licenseKey |
Your Seaworthy license key (Pro tier) |
seaworthy.llmProvider |
LLM provider for Pro checks: anthropic, openai, kimi, deepseek, gemini, ollama, openrouter |
seaworthy.llmApiKey |
API key for the selected LLM provider |
seaworthy.llmModel |
Model name (e.g. claude-3-5-sonnet-latest, gpt-4o-mini) |
seaworthy.llmApiUrl |
Custom API base URL (optional) |
Settings are stored in VS Code's secret storage (OS keychain) for security.
Tiers
- Free — ~12 core security checks (secrets, CVEs, env files, lockfile analysis)
- Pro — Full catalog (~115 checks) with LLM-assisted deep analysis, unlimited projects
Get a license at seaworthycode.com.
Requirements
- VS Code 1.85.0 or later
Privacy
Pro checks send code context to your LLM provider via your own API key. No code is ever sent to Seaworthy servers.
Support
- Documentation: seaworthycode.com/docs
- Issues: github.com/anomalyco/opencode/issues