Overview

This Code Insight extension allows development teams to easily integrate open source scanning into their Visual Studio IDE and

• Scans your project output for Open Source Components
• Automatically creates tasks in Code Insight (with optional external JIRA work items) for any non-compliant items based on your configured policies
• Continuously monitors your bill of materials and generates alerts for any new security vulnerabilities

About Code Insight

Code Insight helps development, legal and security teams to reduce open source security risk and manage license compliance with an end-to-end system. It is a single integrated solution for open source license compliance and security. Find vulnerabilities and remediate associated risk, while you build your products and during their lifecycle. Manage open source license compliance. And add automation to your processes and implement a formal OSS strategy and policy that balances business benefits and risk management.

Contact us for more information about Code Insight

Get Started with Code Insight for Visual Studio Extension

Follow the steps below to configure your Code Insight extension:

• Install the extension from marketplace or from your Visual Studio IDE (Tools --> Extensions and Updates...)
• Restart IDE for installation to complete
• In Solution Explorer, click on the highlighted icon below.

• The configuration window for the extension shows up

• Provide the necessary values and invoke scan from the Right Click menu of the Solution - Code Insight Scan
• If you have selected 'Scan Solution after build', the solution is scanned for OSS components after every build