Real-time security vulnerability scanner and auto-fixer for VS Code.
Detects SQL Injection, XSS, Command Injection, Hardcoded Secrets, Weak Cryptography, and Path Traversal vulnerabilities in your code — and fixes them with one click.
Features
🔍 6 vulnerability categories with 50+ detection patterns
⚡ Auto-scan on save — vulnerabilities appear instantly as you code
🔧 One-click fix — lightbulb menu with intelligent auto-fix
Open any supported file (.py, .js, .ts, .php, .java)
Vulnerabilities appear automatically with underlines
Hover for details, click lightbulb for fixes
Commands
FYLGJA: Scan Current File — scan the active file
FYLGJA: Scan Entire Workspace — scan all files in workspace
FYLGJA: Fix All Vulnerabilities — batch fix current file
Settings
Setting
Default
Description
fylgja.scanOnSave
true
Auto-scan when files are saved
fylgja.scanOnOpen
true
Auto-scan when files are opened
fylgja.severityThreshold
MEDIUM
Minimum severity to display
Development
# Install dependencies
npm install
# Compile
npm run compile
# Watch mode
npm run watch
# Test in VS Code
# Press F5 in VS Code to launch Extension Development Host
Testing
Open the files in test-files/ to see the scanner in action:
