OpenText™ Application Security Analysis Extension for Visual Studio Code

With the OpenText™ Application Security Analysis Extension for Visual Studio Code, you have three ways to scan your project for security vulnerabilities:

• Perform a static assessment, static+ assessment, or open-source scan on an application release and upload the analysis results to OpenText™ Core Application Security.
• Run a locally installed version of OpenText SAST on the currently opened project. To view the analysis results, upload the Fortify Project Results (FPR) file to an Application Security server.
• Run a remote analysis using ScanCentral SAST.

You can also perform a quick scan on the currently opened project and upload the analysis results to OpenText™ Core Application Security or Application Security.

This extension will be deprecated in a future release. It is recommended to use the new OpenText Fortify Code Security to enable deeper scan options, seamless in-editor vulnerability analysis, Skills/MCP integration, and AI-assisted auto remediation.

Run extension

To run the extension, click the OpenText™ Application Security Analysis icon in the Activity Bar.