VS Code extension

Cybros Security brings scanning, inline findings, and AI review into VS Code. Findings render as diagnostics (inline squiggles + the Problems panel), and your API key is stored securely in the OS keychain.

Extension id: cybros.cybros-vscode
Requires VS Code ^1.85.0.

Install

From the Marketplace

Placeholder — Marketplace publication pending. Search "Cybros Security" in the Extensions view once published.

From the `.vsix`

A packaged build ships in the repo:

code --install-extension clients/vscode/cybros-vscode-0.1.0.vsix

Or in VS Code: Extensions view → ⋯ → Install from VSIX… and pick the file.

Log in

Run Cybros: Login from the Command Palette (⇧⌘P / Ctrl+Shift+P) and paste your cybros_sk_... key (or a Supabase JWT). The key is verified against /me and stored in VS Code SecretStorage (the OS keychain) — never in settings or plaintext. Your org and role appear in a notification, and the status bar shows your login state.

Scan the workspace

Run Cybros: Scan Workspace (also available from the Cybros view's title bar). The extension:

resolves the repository from the workspace git remote — or the cybros.repositoryId setting;
triggers a scan and shows a progress notification while it runs;
loads the findings and publishes them as diagnostics.

Findings as diagnostics

Each finding's file_path + line + severity becomes a vscode.Diagnostic, so it appears inline and in the Problems panel:

Cybros severity	VS Code severity
`critical`, `high`	Error
`medium`	Warning
`low`, `info`	Information

The diagnostic message is prefixed with severity/OWASP/CWE tags, and its code is the rule id.

Findings tree

Cybros: Show Findings opens the Cybros activity-bar view: a tree grouped by severity. Click a finding to jump to the file and line. Use the refresh button in the view title to re-pull the latest scan's findings.

AI Review

Run Cybros: AI Review after a scan to run/await the 9-agent analysis for the latest scan. The result opens in a webview showing the risk score, overall confidence, an agent summary, and how many AI-fix patches are available.

Scan on save

Enable cybros.scanOnSave to trigger a scan automatically whenever you save a file (only while signed in).

Settings

Setting	Default	Description
`cybros.apiUrl`	`https://backend.cybros.hacktigerlabs.com/api/v1`	Base URL of the Cybros API.
`cybros.repositoryId`	`""`	Repository id to scan; if empty, resolved from the git remote.
`cybros.scanOnSave`	`false`	Trigger a scan automatically on file save.

For a local/self-hosted backend, set cybros.apiUrl to e.g. http://localhost:8000/api/v1.

Commands

Command	Palette title
`cybros.login`	Cybros: Login
`cybros.logout`	Cybros: Logout
`cybros.scanWorkspace`	Cybros: Scan Workspace
`cybros.aiReview`	Cybros: AI Review
`cybros.showFindings`	Cybros: Show Findings

Cybros: Logout clears the stored key and all diagnostics.

How it works

The extension embeds the @cybros/sdk TypeScript client and reads the key from SecretStorage on demand. See the package README for build/dev instructions.