Visual Studio Code extension

The Snyk Visual Studio Code plugin provides analysis of your code and open source dependencies. Download the plugin at any time free of charge.

Snyk scans for vulnerabilities and returns results with security issues categorized by issue type and severity.

For open-source, you receive automated algorithm-based fix suggestions for both direct and transitive dependencies.

This single plugin provides a Java vulnerability scanner, a custom code vulnerability scanner, and an open-source security scanner.

Snyk scans for the following types of issues:

Open Source Security - security vulnerabilities and license issues in both direct and in-direct (transitive) open-source dependencies pulled into the Snyk Project. See also the Open Source docs.

Code Security and Code Quality - security vulnerabilities and quality issues in your own code. See also the Snyk Code docs (https://docs.snyk.io/products/snyk-code).

This page explains installation of the Visual Studio Code extension. After you complete the steps on this page, you will continue by following the instructions in the other Visual studio Code extension docs:

• Visual Studio Code extension configuration
• Visual Studio Code extension authentication
• Create a .dcignore file
• Run an analysis with Visual Studio Code extension
• View analysis results from Visual Studio Code extension
• Troubleshooting for Visual Studio Code extension

Supported languages, package managers, and frameworks

Supported languages and frameworks include C#, JavaScript, TypeScript, Java, Go, Ruby, Python, Ruby, PHP, Scala, Swift, and Objective-C.

• For Snyk Open Source, the VS Code extension supports all the languages and package managers supported by Snyk Open Source and the CLI. See the full list in the docs.
• For Snyk Code, the VS Code extension supports all the languages and frameworks supported by Snyk Code.

Install the extension

The Snyk Visual Studio Code extension is available for installation on the Visual Studio code marketplace.

Follow these steps to install:

• Open the settings or preferences in your IDE.
• Navigate to the Snyk Extension on the Visual Studio Code Marketplace and click Install.
  For more information see the installation instructions.
• Configure the Snyk CLI; see Visual Studio Code extension configuration.
• Authenticate with Snyk; see Visual Studio Code extension authentication.
• Navigate back to the IDE; the first scan starts automatically.

Support and feedback

If you need help, submit a request to Snyk Support.

Snyk continuously strives to improve the Snyk plugins experience. If you would you like to share your feedback about the Snyk Visual Studio extension, schedule a meeting.