VibeSecure VS Code Extension

VibeSecure is a secure SDLC-guided assistant for writing safer code in VS Code. It runs a multi-stage pipeline (context elicitation, threat analysis, secure code guidance, scalability review, handoff summary) and surfaces security notes, uncertainty flags, and checklists.

Features

• Run a structured VibeSecure SSDLC pipeline from VS Code
• Copilot-style one-click secure assistant command
• Optional manual stage confirmation or auto-stage mode
• Analyze selected code and insert security comments
• Per-stage security checklist and uncertainty flags output

Quick Start

1) Install and Open Extension

1. Open the extension in VS Code (Run Extension).
2. Press Ctrl+Shift+P (or Cmd+Shift+P on macOS) and run > VibeSecure: Run SSDLC Pipeline.

2) Run the pipeline

1. Provide a short summary of what you are building.
2. Answer the user/environment/compliance prompts.
3. Choose stage mode:
   • Auto: pipeline proceeds through all stages automatically.
   • Manual: you confirm each stage before moving on.
4. Review stage outputs and checklist in the VibeSecure output channel.

3) Copilot-Style Secure Assistant (One Click)

1. Press Ctrl+Shift+P and run > VibeSecure: Copilot-style Secure Assistant.
2. Provide the requested prompt and context.
3. The extension uses your configured stage mode (auto or manual) to run the pipeline.

4) Analyze selected code

1. Select code in an editor.
2. Right-click and choose VibeSecure: Analyze Selected Code (or use command palette).
3. The extension inserts auto-generated security comments above the selection.

Settings

Open Settings (Ctrl+, or Cmd+,), search for vibesecure.stageMode.

• vibesecure.stageMode = "auto" (default): run all stages without interactive prompts.
• vibesecure.stageMode = "manual": confirm each stage before proceeding.

Commands

• vibesecure.run: Run full SSDLC pipeline (interactive prompt flow).
• vibesecure.runCopilot: Copilot-style assistant command (one-click secure run).
• vibesecure.analyzeSelection: Analyze selected code and insert security comments.

Example Workflow

1. Run VibeSecure: Copilot-style Secure Assistant.
2. Enter a feature description and context.
3. Use auto mode for fast iteration or manual mode for explicit checkpoints.
4. Check the output channel for detailed stage notes and unresolved uncertainties.
5. Apply guidance in your code and run again as needed.

Notes

• VibeSecure is a guidance assistant, not an enforcement engine. Always review outputs and apply them in code.
• Uncertainty flags are shown for decisions requiring human verification.

Troubleshooting

• If commands do not appear, ensure extension is activated and the package.json contribution commands exist.
• If output is empty, confirm your project context summary is provided and that the extension has permission to write to output.

For research details and pipeline design, see vibesecure/RESEARCH.md.