Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Linking VSCode to Static Analyses results, made by Jenkins and GitLab Static Reviewer plugins.

  • An interactive interface for viewing scan results in the Visual Studio Code environment. This interface has several advantages over the regular Static Reviewer web interface:

  • You can make changes to the code as you view the vulnerabilities in the locations indicated by the scan results without a needing to switch between applications.

  • The extension displays full paths with their intersections, rather than just the first and last elements of each vulnerability instance.

  • The extension highlights the elements where fixes can be most efficiently applied.

...

It will invoke Static Reviewer Desktop both locally (requires Ststis Reviewer preinstalled) and remotely (required Team Reviewer and Static Server Plugin for Team Reviewer):

...

Once you analyzed your application you can have results directly in Eclipse, by using the Security Reviewer View.

...