Home

DevSkim is a framework of IDE plugins and language analyzers that provide inline security analysis in the dev environment as the developer writes code. It is designed to work with multiple IDEs (VS, VS Code, Sublime Text, etc.) or as a standalone command line interface, and has a flexible rule model that supports multiple programming languages. The idea is to give the developer notification as they are introducing a security vulnerability in order to fix the issue at the point of introduction, and to help build awareness for the developer.

Using DevSkim

• Supported Languages
• IDE Extensions
• Command Line Interface
• API
• Writing Rules
• Testing Rules

Community

GitHub Issues for bug and feature reporting

Contributing

• What can you help us out with
• Git Workflow
• Coding styles