Skip to content
| Marketplace
Sign in
Visual Studio Code>Other>Contribution ProvenanceNew to Visual Studio Code? Get it now.
Contribution Provenance

Contribution Provenance

caiman

|
2 installs
| (1) | Free
Prove your PR was hand-written — track editing activity and attach signed proof to pull requests
Installation
Launch VS Code Quick Open (Ctrl+P), paste the following command, and press enter.
Copied to clipboard
More Info

Contribution Provenance for VS Code

Automatically track your coding sessions so you can prove to maintainers that your PR was actually hand-written — not dumped by an agent.

Features

  • Automatic session tracking — starts recording when you open a provenance-enabled repo
  • Editing activity — tracks active time, revision passes, and rework ratio without capturing keystrokes or file contents
  • Test run detection — notices when you run tests, lint, or build in the terminal
  • Status bar — shows session state and elapsed time at a glance
  • Export & attach — generate a signed activity snapshot and attach it to your PR

Getting Started

  1. Install the Contribution Provenance CLI:

    npm install -g @contrib-provenance/cli
    
  2. Initialize provenance in your repository:

    provenance init --signing auto --hooks
    
  3. Open the repo in VS Code — the extension activates automatically and begins tracking.

  4. When you're ready to submit a PR:

    provenance export
    provenance attach <PR-URL>
    

Commands

Command Description
Provenance: Start Session Begin tracking a coding session
Provenance: End Session Stop tracking and finalize metrics
Provenance: Checkpoint Session Capture metrics without ending the session
Provenance: Show Session Status Display current session details
Provenance: Inspect Current Session View the full session data
Provenance: Export Attestation Generate a signed activity snapshot

Settings

Setting Default Description
provenance.autoStart true Automatically start a session when opening a provenance-enabled repo
provenance.idleTimeoutMinutes 5 Minutes of inactivity before the session timer pauses

Privacy

This extension only collects totals and counts — never keystrokes, file contents, or clipboard data. Everything stays on your machine until you explicitly export. See the project README for full details.

License

MIT

  • Contact us
  • Jobs
  • Privacy
  • Manage cookies
  • Terms of use
  • Trademarks
© 2026 Microsoft