Visual Studio extension

Scan early, fix as you develop: elevate your security posture

Integrating security checks early in your development lifecycle helps you pass security reviews seamlessly and avoid expensive fixes down the line.

The Snyk Visual Studio extension allows you to analyze your code and open-source dependencies. With actionable insights directly in your IDE, you can address issues as they arise.

Key features:

• Comprehensive scanning: The extension scans for a wide range of security issues, including:
  • Open Source Security: Detects vulnerabilities and license issues in both direct and transitive open-source dependencies. Automated fix suggestions simplify remediation. Explore more in the Snyk Open Source documentation.
  • Code Security: Identifies security vulnerabilities in your custom code. Explore more in the Snyk Code documentation.
  • IaC Security: Uncovers configuration issues in your Infrastructure as Code templates (Terraform, Kubernetes, CloudFormation, Azure Resource Manager). Explore more in the IaC documentation.
• Broad language and framework support: Snyk Open Source and Snyk Code cover a wide array of package managers, programming languages, and frameworks, with ongoing updates to support the latest technologies. For the most up-to-date information on supported languages, package managers, and frameworks, see the supported language technologies pages.

How to install and set up the extension

Note: For information about the versions of Visual Studio supported by the Visual Studio extension, see Snyk IDE plugins and extensions. Snyk recommends always using the latest version of the Visual Studio extension.

You can use the Snyk Visual Studio extension in the following environments:

• Windows: 386, AMD64, and ARM64
• MacOS: Visual Studio Windows plugin in a Windows virtual machine inside a Mac with an ARM64 processor

Install the plugin at any time free of charge from the Visual Studio marketplace and use it with any Snyk account, including the Free plan. For more information, see the VS extension installation guide.

After the extension is installed, use Snyk through the Extensions > Snyk menu.

You can also open the Snyk tool window using View > Other Windows > Snyk.

When the extension is installed, it automatically downloads the Snyk CLI, which includes the Language Server.

Continue by following the instructions in the other Visual Studio extension docs:

• Visual Studio extension configuration, environment variables, and proxy
• Authentication for Visual Studio extension
• Visual Studio Workspace trust
• Run an analysis with Visual Studio extension
• View analysis results from Visual Studio extension

Support

For troubleshooting and known issues, see Troubleshooting and known issues with Visual Studio extension.

If you need help, submit a request to Snyk Support.