#devsecops

KubeDock Security Scan

chloe-teo10

Scan Kubernetes manifests, Dockerfiles, and Helm charts with Checkov. Publishes results as a pipeline HTML report, with optional PR comments and OpenTelemetry metrics.

DevLeakShield

mathan0072007

Leak-reduction clipboard and AI workflow protection for VS Code

Shomra — AI Security

Shomra

Gate and fix AI artifacts (MCP servers, Skills, rules, hooks) and flag known-vulnerable AI models right in your editor. Works in VS Code and Cursor.

VulTech — Enterprise Application Security

vultechio

Unified SAST, SCA & compliance in VS Code and Cursor. Enterprise SSO, air-gapped on-prem, and the same detection engine as the VulTech platform.

Alert Security

Nikhil-8814

AI-assisted secret scanning for git commits and pushes.

SecretLens — Secret Scanner

PQRHoldings

Manually scan your VS Code workspace for exposed API keys, credentials, tokens, private keys, and connection strings—entirely locally.

One download, three surfaces: the PlaneKey toolchain (pk-client, pk-memory, Env-Observer MCP server) bundled into an IDE trust/control layer for AI-built software — use it in the editor, from the CLI, or over MCP.

AI coding security co-pilot — blocks insecure code at generation time. Catches docker-compose port exposure, secrets, AI agent patterns, and more.

mcp-audit

batoisystems

Audit Model Context Protocol configurations from VS Code.

FLCN Security — Credential & Vulnerability Guard

FLCN-16

Real-time credential detection and redaction. Protects against leaking API keys, tokens, and secrets to AI coding assistants.

Aegis Security

aegis-security

Evidence-backed security for AI-generated software: findings, fixes, independent verification, policy, and audit inside VS Code.

Analiza Dockerfiles, Docker Compose, Kubernetes y archivos .env en busca de vulnerabilidades de seguridad directamente en VSCode.