r/vscode • u/Holly-Carpenter_253 • 16h ago
IDE security scanning that runs before I commit, does that even exist
Every security scan on my team shows up after the fact. I push, the pipeline runs and an hour later I get a wall of findings on code I have already mentally moved on from. By then fixing it means context switching all the way back into something I was done with.
What I want is IDE security scanning that runs while I am writing, in the editor, before the commit even exists. I have tried a couple of extensions and they were either so noisy I turned them off in a day or so shallow they caught nothing. With an assistant writing half my code now, catching this at the point it is written seems like the only place that scales.
Feels like this should be solved by now and somehow it is not.
