EP Remediator

EP Remediator is a specialized VS Code Chat Extension that helps developers identify code vulnerabilities and apply secure remediation guidance using internal security knowledge bases.

Features

• Vulnerability Analysis: Scans code snippets to highlight potential security flaws.
• Context-Aware Remediation: Offers targeted, production-ready fix recommendations built on security best practices.
• Interactive Chat Participant: Query @remediator directly in your VS Code Chat sidebar.

Usage

1. Open the VS Code Chat panel (Ctrl+Alt+I / Cmd+Alt+I).
2. Type @remediator followed by your prompt or question.
3. Example prompts:
   • @remediator How do I remediate SQL injection in this query?
   • @remediator Review my selected code for insecure deserialization.

Requirements

• VS Code v1.125.0 or higher.
• GitHub Copilot Chat extension installed and enabled.

Extension Settings

This extension operates out-of-the-box with default security guidelines. No additional settings are required.

Release Notes

0.0.1

• Initial release of EP Remediator with @remediator chat participant integration.

Acknowledggments & Data Sources

This extension leverages guidance, taxonomies, and remediation patterns informed by open security standards:

• OWASP: Top 10 Application Security Risks and Cheat Sheet Series.
• MITRE CWE: Common Weakness Enumeration dictionary for vulnerability categorization.
• MITRE ATT&CK: Knowledge base of adversary tactics and techniques.