AccuKnox Code Security

Find and fix security issues without leaving your editor — SAST, SCA, secrets, IaC, container/SBOM, and ML model scanning, with AI-assisted remediation and chat.

Your code never leaves your machine. Scan results stay local; nothing is uploaded to AccuKnox. Signing in with an Access Key only authorizes use of the extension.

Features

• Multi-engine scanning — SAST, SCA, secrets, IaC, ML-static, and container/SBOM in one place
• Scan the whole project or just what changed — full workspace or git-changed files only
• Findings sidebar — group by severity, scan type, or file; suppress and restore findings
• Inline diagnostics — issues surface in the Problems panel and directly in your code
• AI remediation — one-click fix suggestions you review and accept or reject
• AI chat — ask questions about a specific finding or your code's security
• Bring your own scanner — wire in any SARIF- or Semgrep-JSON-producing CLI via settings

Requirements

• VS Code 1.85+ (Cursor works identically — it's a VS Code fork)
• Python 3.9+, to install the scanner CLI the extension runs

Install the scanner CLI:

python3 -m pip install --user --upgrade "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.7/accuknox_aspm_scanner-0.14.7-py3-none-any.whl"

Alternatively, download the platform binary (accuknox-aspm-scanner / accuknox-aspm-scanner.exe) from the releases page and add it to your PATH.

The extension detects a missing scanner automatically and offers to install it for you — the command above is only needed if that doesn't work, or you'd rather install it yourself first.

Common install issues:

• error: externally-managed-environment (Debian, Ubuntu, WSL, or a Homebrew-managed Python): add --break-system-packages to the command above.
• Windows, "Python not found": install Python from python.org, then fully quit and reopen your editor — it only picks up a new PATH on launch.
• Behind a proxy: configure pip's proxy (HTTPS_PROXY environment variable) or download the file manually from the releases page and run python3 -m pip install --user <downloaded-file>.whl.

Installing the extension

From a .vsix file:

The command-line method reports real errors instead of a progress bar that can appear to hang.

Quick start

1. Install AccuKnox Code Security (above).
2. Confirm the scanner CLI is available:

   accuknox-aspm-scanner --help
   

3. Open your project in VS Code.
4. Sign in: Command Palette → AccuKnox: Log In / Set Access Token, then paste an Access Key from the AccuKnox console (Profiles → Access Token).
5. Run a scan: Command Palette → AccuKnox: Run Scan (Full Directory), or use the play button in the AccuKnox → Findings view.
6. Review results in the AccuKnox activity bar — Findings, Suppressed, and AI Chat.

Authentication

Commands: Log In / Set Access Token, Log Out, Show Authentication Status.

Default endpoint: https://cspm.demo.accuknox.com — change it with accuknox.auth.endpoint for a staging, production, or on-premises deployment.

Commands

Configuration

Open Settings and search accuknox, or edit settings.json directly:

{
  "accuknox.scanner.command": "accuknox-aspm-scanner",
  "accuknox.scanner.executionMode": "local",
  "accuknox.auth.endpoint": "https://cspm.demo.accuknox.com",
  "accuknox.scan.types": {
    "sast": true,
    "sca": true,
    "secret": true,
    "iac": true,
    "ml-scan": false,
    "container": false
  }
}

API keys and tokens are never written to settings files — they're always stored in your OS's secure credential store.

Configuring the AI model

accuknox.llm.model and accuknox.llm.apiBase are regular settings, editable anytime. Your API key is set separately, via Command Palette → "AccuKnox: Set LLM API Key" — never add it to settings.json.

Troubleshooting

Privacy

• Your Access Key is used only to verify your AccuKnox account before a scan.
• Scan results stay in your editor. This extension does not upload findings to AccuKnox.

Support

• Product and documentation: accuknox.com
• Issues: contact your AccuKnox support channel