Gardera Security

Find vulnerabilities, leaked secrets, and risky dependencies in the comfort of your IDE.

Gardera brings Application Security Posture Management (ASPM) directly into your IDE so you can catch security issues as you code, not after you ship.

Features

Dependency Scanning

Scan your lockfiles for known vulnerabilities. Gardera automatically downloads and runs the scan. No extra setup needed.

Secrets Scanning

Detect hardcoded secrets and credentials in your source files. Runs automatically every time you save, so leaked keys are caught immediately.

GardWatch — Dependency Health Scoring

Get a health score for your dependencies when you open or modify a lockfile. Understand which packages are well-maintained and which ones are a risk.

Platform Findings

Connect to the Gardera platform to browse security findings across your organization's repositories.

Asset Label Management

View and manage repository labels directly from the IDE.

AI Agent Integration

Set up GardWatch as an MCP tool to alert against potential malicious dependencies.

Getting Started

1. Install the extension from the VS Code Marketplace
2. Click the Gardera icon in the Activity Bar

Local Scans

Dependency and secrets scanning work out of the box. No account or API key required. Click "Scan Workspace" in the Scanners tab to get started.

Platform

To access platform features (findings, labels), add your API key:

1. Open Settings (Cmd+, / Ctrl+,) and search for Gardera
2. Enter your API key (generate one here)

GardWatch MCP Server

GardWatch can run as an MCP server so that AI coding agents can check dependencies for security risks while they work.

Automatic setup (recommended):

Open the Command Palette (Cmd+Shift+P / Ctrl+Shift+P) and run Gardera: Setup AI Agent Integration. Select your AI assistant (Claude Code, Cursor, Windsurf, or Cline) and choose whether to configure it globally or for the current workspace.

Manual setup:

Add the following to your MCP configuration file:

{
  "mcpServers": {
    "gardera-gardwatch": {
      "command": "npx",
      "args": ["-y", "@gardera/gardwatch-mcp"],
      "env": {
        "GARDERA_API_KEY": "your-api-key"
      }
    }
  }
}