The Visual Studio Code extension provided by DeepCode.ai finds bugs and critical vulnerabilities in your code. We support JavaScript and TypeScript, Java, C/C++, and Python.
- DeepCode for Visual Studio Code
- Table of Contents
- DeepCode extension
- Installation
- How to use it?
- Feedback and contact
Through the extension you can quickly start using DeepCode's code review and analysis within your development workflow. The extension will automatically alert you about critical vulnerabilities you need to solve in your code the moment when you hit Save in your IDE. With DeepCode's superior code review you save time finding and fixing bugs before they go to production.
DeepCode uses symbolic AI to process hundreds of millions of commits in open source software projects and learns how to find serious coding issues. Because the platform determines the intent of the code — and not only the syntax mistakes — DeepCode identifies 10x more critical bugs and security vulnerabilities than other tools.
In order to show the detailed explanation of a potential bug, we introduced a new AI technique called Ontology. With Ontology, we’ve integrated the capability to present logical argumentation used by the DeepCode engine.
JavaScript, TypeScript, Java, C/C++, and Python are currently supported.
-
We've prepared a 2 minutes video on how to install the extension. Head over to YouTube to quickly get the extension up and running:
- select "Cloud" when you want to use the free cloud infrastructure. Authentication by your Github, BitBucket or Gitlab account.
- select "Self-managed" when you have access to an on-premise DeepCode Server installation. The DeepCode Server is likely running in combination with self-managed BitBucket or Gitlab.
- DeepCode's extension runs automatically when you opened a folder or project and hit Save (or the keyboard shortcut).
- If you don't like to save while working we strongly recommend to enable the AutoSave.
- Here is a video on how to use the extension. In short - don't forget to save and you will be in good hands:
- Here is how it looks like when inspecting all issues using the "Problems" tab and syntax highlight:
There are two key steps here:
- Ignore particular alert directly within its suggestions tooltip or 'bulb' menu:
- Deepcode will create a code comment, that will inform our analysis engine to ignore it. Don't forget to specify a description why you think it needs to be ignored.
- If the above information is not enough and want to see it in action, here is a video:
- If you want to ignore certain files/folders (like node_modules for example), create a .dcignore file. You can create it in any folder on any level starting from the directory where your project resides. The file syntax is identical to .gitignore:
- In case you need to contact us or you want to provide feedback, we love to hear from you - here is how to get in touch with us.
- If you need to update this file, you can do so by editing this README.md.