CodeGraph VS Code Extension

AI Security Scanner for Visual Studio Code. Discover AI assets and analyze security vulnerabilities in your codebase.

Features

pip install codegraph

Or with AI providers:

pip install codegraph[anthropic]  # For Claude
pip install codegraph[openai]     # For GPT-4
pip install codegraph[all]        # All providers

This extension contributes the following settings:

Setting	Default	Description
`codegraph.executable`	`codegraph`	Path to CodeGraph CLI executable
`codegraph.aiProvider`	`auto`	AI provider (auto, anthropic, openai, gemini, etc.)
`codegraph.autoScan`	`true`	Automatically scan on file save
`codegraph.severityThreshold`	`low`	Minimum severity to show
`codegraph.analysisMode`	`static`	Analysis mode (static, smart, validate)

Command	Description
`CodeGraph: Scan Workspace`	Scan the entire workspace
`CodeGraph: Scan Current File`	Scan the current file
`CodeGraph: Clear Diagnostics`	Clear all CodeGraph diagnostics

Findings are mapped to VS Code diagnostic severity:

For smart/validate modes, configure an AI provider:

Set the API key as an environment variable:
- ANTHROPIC_API_KEY for Claude
- OPENAI_API_KEY for GPT-4
- GOOGLE_API_KEY for Gemini

Or specify in settings:

{
  "codegraph.aiProvider": "anthropic"
}

cd vscode-codegraph
npm install
npm run compile

npm install -g @vscode/vsce
vsce package

This creates a .vsix file you can install manually.

MIT License - see LICENSE for details.