WhoAmI (Codefy) — Security Intelligence for VS Code
WhoAmI is a developer-first security intelligence and taint-flow static analysis extension for Visual Studio Code. It detects real-time vulnerabilities, traces end-to-end dataflow paths, visualizes blast radiuses in an interactive architecture graph, and provides one-click real code remediation directly in your workspace.
Features
Real-Time Static & Taint-Flow Analysis
In-process AST Analysis: Powered by web-tree-sitter and ast-grep.
Zero-Latency Local Scans: Scans your active workspace locally without sending confidential source code to external servers.
Deduplicated Finding Engine: Grouped and ranked findings across CWEs:
