Trussed AI Extension for VS Code

Description

Code Provenance with Trussed AI scans AI-generated and developer-written code in VS Code, flags potential open source matches, and displays associated licenses and IP and compliance risks directly in the editor, helping developers address issues before code is committed or built.

Key capabilities

• Open source matching: Scan code against a collection of open source projects to identify potential origins.

• Structural analysis: Detect meaningful similarities, even when variables, formatting, or comments have changed.

• License visibility: Surface probable license families and potential licensing restrictions associated with likely matches.

• In-editor findings: Review and resolve potential risks within your development workflow.

Why it matters:

AI coding assistants can produce code that resembles open source implementations without making the source or license obligations visible. Copyleft or restrictive licenses may carry obligations that need review. Trussed surfaces potential issues before code is committed, helping developers resolve risks early and avoid findings during an audit or security review.

Code Provenance complements dependency and build artifact scanning by examining source code as it is created.

Part of the TrussedAI Controller platform:

Code Provenance is a capability of Trussed AI, the governance and assurance platform for enterprise AI.