Extensions
IjyaLabs DaaCini — Diagram-as-Code
ijyalabs
Live preview + SVG export for DaaCini diagrams-as-code, in VS Code / Cursor / VSCodium. Renders via the hosted IjyaLabs service by default, or your own self-hosted `daacini serve` (source in, SVG out — no engine bundled).
ASC — Container Security Analyzer
AlonsoSagua
Analiza Dockerfiles, Docker Compose, Kubernetes y archivos .env en busca de vulnerabilidades de seguridad directamente en VSCode.
MacroDeploy
sakamotolabs
AI code audits that run locally — on your own Claude credential.
DependencyAudit — Vulnerabilities on Your Import Lines
mjethwa-streamlit
Shows CVE severity badges on import statements using OSV.dev, with safe-version hints. License compliance, transitive scanning, and commit checks with Pro.
codeprov — Code Provenance Guard
yunus-emre-albayrak
Flags AI-generated or pasted code you never actually read — before you commit it. 100% local, no API keys, no cloud.
Tigergate for IDE
TigerGate
Inline security findings and AI-powered fixes for your code, powered by TigerGate's SAST + secrets + SCA + IaC rule sets. Connects to your TigerGate workspace via API key.
DropLock Guard
dropaphi
AI-powered API security coverage for Express, Fastify, Koa, and Next.js
MergeLock Code Scanner
teskilatsiz
Local-first security scanner for changed-lines-first developer workflows.
klynx-comply — AI Agent Governance Scanner
klynxai
Real-time AI agent governance checks inside VS Code. Catches missing audit trails, weak prompt injection guards, unprotected PII handling, and 5 more before you commit. Wraps the open-source klynx-comply CLI (QUIET COYOTE).
ValidateExtension V1
chandanasaisree
A VS Code Extension Security & Trust Analyzer - Analyze extensions with AI version scoring, personalized recommendations, security assessments, and trend insights
VaultPulse
evolve-data
Read-only Azure Key Vault secrets viewer for VS Code — multi-vault, multi-tenant
CloudCheck
headspace222-dev
Inline compliance linting for Bicep, Terraform, and ARM templates. 38 rules mapped to CIS Azure Benchmark. Catches naming violations, security misconfigurations, and missing governance controls as you write.