JetBrains plugin

Cybros Security for IntelliJ-platform IDEs (IntelliJ IDEA, PyCharm, WebStorm, GoLand, …). Scan a project, browse findings in a tool window, jump to the offending line, and run the AI security review — without leaving the editor.

  • Plugin id: com.cybros.intellij
  • Requires the IntelliJ Platform 2024.2 SDK and JDK 21+ to build.

Install

From the JetBrains Marketplace

Placeholder — Marketplace publication pending. Once published: Settings → Plugins → Marketplace, search "Cybros Security".

From a built zip

  1. Build the plugin (needs network access on first build to fetch the SDK):

    cd clients/jetbrains
    ./gradlew buildPlugin
    

    The distributable is produced at:

    build/distributions/cybros-intellij-0.1.0.zip
    
  2. In your IDE: Settings → Plugins → ⚙ → Install Plugin from Disk… and pick the zip.

  3. Restart the IDE.

To try it in a sandbox IDE without installing:

./gradlew runIde

Log in

Tools → Cybros → Cybros: Login — enter and verify your cybros_sk_... key. The key is stored in the IDE credential store (PasswordSafe), never in plain settings XML.

Scan a project

Tools → Cybros → Cybros: Scan Project resolves the repository, calls POST /scans, polls until the scan finishes (on a cancellable background task), and loads the findings into the tool window.

Repository resolution

  1. the explicit Repository ID setting if present, else
  2. the project's git origin remote → owner/repo, matched against GET /repositories by full_name.

Findings tool window

The Cybros tool window (docked at the bottom) shows a findings table: severity, rule, file:line, and title. Double-click a row to open the file at the offending line.

AI Review

Tools → Cybros → Cybros: AI Review triggers and polls the 9-agent AI analysis for the latest scan, reporting progress on a background task.

Settings

Settings → Tools → Cybros:

SettingStorageDefault
API URLapplication settingshttps://backend.cybros.hacktigerlabs.com/api/v1
API keyPasswordSafe
Repository IDapplication settingsresolved from the git origin remote

For local development, set the API URL to http://localhost:8000/api/v1.

Actions reference

Action idMenu label
com.cybros.actions.LoginActionCybros: Login
com.cybros.actions.ScanProjectActionCybros: Scan Project
com.cybros.actions.AiReviewActionCybros: AI Review

How it works

The plugin talks to the API with the JDK's java.net.http.HttpClient and kotlinx.serialization (lenient JSON) — no third-party HTTP dependency. See the package README for the full project layout and build notes.

See also