code-scanning - VS Code Extensions

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

Linters #cve

98 5.0

SYNAPTIC Sentinel

RealGoLab

The vibe-coding security sentinel. Apache-2.0 agentic auditing for AI-assisted projects: five scouts (OpenGrep, Gitleaks, Trivy, Checkov, Vibe-Detect) + a Brain Layer (BYOK Anthropic) that triages, explains and remediates — all in the IDE.

Linters Testing #BYOK

32

G

GitHub Code Scanner

swarooptirumala

Fetch and aggregate GitHub code scanning alerts across an org or repo into a readable report.

Other #security

15

CleanMyPrompt — AI Security & Token Intelligence

cleanmyprompt

Stop leaking secrets. Stop burning tokens. Intercepts API keys, PII & credentials before they reach Copilot, and compresses code with LSP-aware squeeze to cut token costs by 30–70%. 100% local.

Linters AI #keybindings

4

Arcanum Sentinel

arcanum

Offline, real-time security diagnostics for JavaScript, TypeScript, Python, Java, C#, Go, PHP, Ruby, and Rust.

Programming Languages Linters #python

3

SecurStack

SecurStackio

Run SecurStack security scans from VS Code.

Linters #sast