Elevate your DevOps journey to DevSecOps

Rainforest Application is a comprehensive platform that allows you to perform multiple security checks in code to ensure a higher level of security.

The platform elevates DevOps to DevSecOps by running Quality, SAST, SCA, DAST, Container, and IAC analyzes in your environment. This allows developers to identify and fix potential security issues early in the development process.

Rainforest's platform provides developers with an efficient and effective way to test their code for vulnerabilities: by integrating security testing into the development process, teams can save time and resources while ensuring the security of their applications. Rainforest.tech

Multiple analysis for your applications

Important!

Please note that the Rainforest Application Security extension requires Visual Studio Code version 1.84.0 or later for installation. Ensure that your Visual Studio Code is updated to the specified version or a higher one to successfully install and utilize the extension.

Generating your clientId and clientSecret in the Rainforest system.

1. Navigate to the Rainforest System.

2. Access Settings > API Access Token > Create Token

3. Give a name to your API Access Token and then click on save.

4. Copy the generated client_id and client_secret.

Install the extension

The Rainforest Application Security Visual Studio Code extension is available for installation on the Visual Studio code marketplace.

To install the extension, follow these steps:

1. Navigate to the Rainforest Application Security extension in the Visual Studio Code Marketplace and click Install.

2. Open the settings in your Visual Studio Code. 2.1 Windows/Linux: Ctrl + , or File > Preferences > Settings 2.2 Mac: Cmd + , or Code > Preferences > Settings

3. Next, click on the three dots in the top right corner of the settings window and select 'Open Settings (JSON).' This will open the settings.json file in JSON format, allowing you to directly edit the settings in JSON.

4. At the end of your file, add these two keys:

"Rainforest.client_id": "your_rainforest_client_id",
"Rainforest.client_secret": "your_rainforest_client_secret"

5. After that, you can click on the Rainforest extension icon and we will show all vulnerabilities that we know about this application.

6. After a commit/merge we will run a new analysis, in case we detect that a vulnerability was fixed we will automatically closed it.

Support

If you need help, submit a support request to support@rainforest.tech.