Scrutora Scan for VS Code

Catch compliance problems while you code — before they ever reach CI.

Scrutora Scan runs an offline, compliance-mapped analysis of your workspace for DPDPA, HIPAA, GDPR, PCI-DSS and RBI and shows findings right in the Problems panel, with the exact file and line. No API key, no account, and your code never leaves your machine.

Usage

Open your project folder in VS Code.
Run Scrutora: Scan Workspace (Command Palette, or the 🛡 Scrutora button in the status bar).
Findings appear in the Problems panel and inline in your files.

Enable Scan on save in settings to re-scan automatically as you work.

Settings

Setting	Default	Description
`scrutora.frameworks`	`dpdpa,hipaa`	Comma-separated frameworks (`dpdpa,hipaa,gdpr,pcidss,…`)
`scrutora.scanPath`	`.`	Path within the workspace to scan
`scrutora.scanOnSave`	`false`	Re-scan automatically on file save
`scrutora.image`	`ghcr.io/nirvahana/dpdp-scan:latest`	Scanner image (advanced)
`scrutora.dockerPath`	`docker`	Path to the docker executable (advanced)

Requirements

The scan runs in a container, so you need Docker installed and running (Docker Desktop on macOS/Windows, or Docker Engine on Linux). The extension will prompt you with a link if Docker isn't detected.

Privacy

Fully offline. No source code, findings, or telemetry are sent to Scrutora or any third party.

Learn more at scrutora.com · GitHub