SecureFlag Analyzer Extension for VS Code

SecureFlag Analyzer Extension for VS Code

AI-powered vulnerability detection, right in your IDE.

Overview

The SecureFlag Analyzer extension integrates into VS Code to deliver real-time security analysis as you code. Powered by advanced LLMs (Anthropic and ChatGPT), it detects potential vulnerabilities and connects you to educational resources, all within your development workflow.

Key Features

  1. Real-Time Vulnerability Detection: Instantly identifies security issues as you write code.
  2. LLM API Integration: Compatible with both Anthropic and ChatGPT APIs.
  3. Knowledge Base Integration: Pulls context-rich vulnerability data from the SecureFlag Knowledge Base.
  4. Context-Aware Analysis: Focuses analysis on the active section of code you're working on.
  5. Educational Resources: Displays links to related articles and hands-on labs.

Installation

  1. Open Visual Studio Code.
  2. Click the Extensions icon on the left sidebar.
  3. Search for SecureFlag Analyzer.
  4. Click Install.

The extension will now be added to your IDE.


Configuration

After installation, follow these steps to configure the extension:
  1. Open the Command Palette:
    1. Ctrl+Shift+P (Windows/Linux)
    2. Cmd+Shift+P (macOS)

  2. Search for and select SecureFlag: Open Settings.

  3. Configure the following options:
    1. API Type: Choose your preferred LLM provider (ChatGPT or Anthropic).
    2. API Keys: Enter your API keys for ChatGPT and/or Anthropic.
    3. LLM Model: Run the command SecureFlag: Select LLM Model from the Command Palette to set or change the model of your choice.
    4. Auto Analysis: Enable or disable automatic analysis on short cursor pause.
    5. Proxy: Configure if required for your network.
NotesNote: Running the SecureFlag: Select LLM Model command lets you select a model based on the chosen LLM provider and the corresponding API key provided.


Usage

Manual Analysis

  1. Open a code file.
  2. Place the cursor in the section of code you want to analyze.
  3. Open the Command Palette and run SecureFlag: Analyze Code.

The SecureFlag Analysis Panel will appear on the right side, displaying potential vulnerabilities and relevant learning resources.

Auto Analysis

If Auto Analysis is enabled in the settings, the extension will automatically scan for vulnerabilities after a short cursor pause. Results will appear in the same analysis panel.


Results Interpretation

The analysis panel includes:
  1. Vulnerability Ranking: Top 3 potential issues detected in the active code section.
  2. Training Articles: Direct links to SecureFlag Knowledge Base articles.
  3. Lab Links: Interactive labs to help you practice and understand each vulnerability.

Stay secure and informed, let SecureFlag Analyzer be your in-editor security assistant.