Industry Code Reviewer (Python)

Industry-grade Python static code review and security analysis extension for Visual Studio Code.

This extension helps developers identify common security issues, hardcoded secrets, and code quality problems using static analysis.
All analysis runs locally with no API keys and no network access.

Features

• Detects hardcoded API keys and secrets
• Highlights potential security issues (static analysis)
• Reports issues directly in the Problems panel
• Fully offline and deterministic
• No AI, no telemetry, no external services

How It Works

The extension runs a Python-based language server that analyzes Python files using static analysis rules and reports diagnostics back to VS Code.

Privacy & Security

• All analysis runs locally on your machine
• No source code is sent externally
• No telemetry or tracking
• No API keys required

Limitations

• Static analysis only
• Does not guarantee detection of all vulnerabilities
• Does not replace manual security review or penetration testing

Requirements

• Python 3.10 or newer installed on the system

Release Notes

0.1.0

• Initial release
• Hardcoded secret detection