Hey everyone 👋 I’m the maker of **CodeRisk** — a privacy-first SAST extension for VS Code. I built this because most security tools today **send your code to the cloud**, which isn’t ideal for privacy or sensitive projects. 🔐 **CodeRisk runs 100% locally** — no telemetry, no data collection. ⚡ It detects vulnerabilities in real-time while you code, including: • SQL Injection • XSS • SSRF • Command Injection • Hardcoded secrets 🧠 It also performs **taint flow analysis (source → sink)** so you can understand exactly how data becomes vulnerable. 💡 Why this matters: Your source code is your IP. It should never leave your machine. That’s why CodeRisk is: ✔ Fully offline ✔ Deterministic (no AI hallucinations) ✔ Fast and developer-friendly I’d love your feedback, ideas, and brutal honesty 🙌 What features would make this essential for your workflow? 👇 Try it here: https://marketplace.visualstudio...

coderisk

Real-time SAST for VS Code, fully local & private

Real-time SAST for VS Code, fully local & private