Security Engineer Stack for VS Code

Static analysis security scanning with custom rules, AST analysis, and multi-language vulnerability detection. Official Semgrep implementation.

Runs static analysis rules to catch security vulnerabilities and dangerous code patterns before they reach production.

Code quality analysis, security hotspot detection, and vulnerability tracking from SonarQube Cloud or Server. Official SonarSource implementation.

Provides continuous code quality and security scanning with detailed remediation guidance for your development team.

Container image scanning, filesystem vulnerability detection, and infrastructure misconfiguration analysis. Official Aqua Security implementation.

Scans container images and infrastructure configs for known CVEs and misconfigurations in your deployment pipeline.

Internet-connected device search, IP reconnaissance, CVE lookups, and DNS intelligence via the Shodan API.

Discovers exposed services and open ports across your external attack surface before adversaries do.

Malware detection, file and URL analysis, IP and domain reputation checks, and threat relationship mapping via the VirusTotal API.

Analyzes suspicious files, URLs, and hashes against dozens of antivirus engines during incident investigation.

Access the GitHub API to manage repositories, issues, pull requests, branches, and workflows directly from your AI editor.

Reviews pull requests for security issues and manages security advisories across your organization's repositories.

Manage Docker containers, images, volumes, and networks. Run, stop, inspect, and monitor containers from your AI editor.

Audits container configurations and base images to enforce security policies in your build pipeline.