package.json

{
  "name": "snyk-vulnerability-scanner",
  "//": "Changing display name requires change in general.ts",
  "displayName": "Snyk Security",
  "version": "0.0.0",
  "description": "Easily find and fix issues in your code, open source dependencies, infrastructure as code configurations with fast and accurate scans.",
  "icon": "media/images/readme/snyk_extension_icon.png",
  "publisher": "snyk-security",
  "homepage": "https://snyk.io",
  "repository": {
    "type": "git",
    "url": "https://github.com/snyk/vscode-extension.git"
  },
  "bugs": {
    "url": "https://support.snyk.io/"
  },
  "engines": {
    "vscode": "^1.76.0"
  },
  "galleryBanner": {
    "color": "#283e55",
    "theme": "dark"
  },
  "categories": [
    "Programming Languages",
    "Linters",
    "Other"
  ],
  "keywords": [
    "Code Analysis",
    "JavaScript",
    "Java",
    "TypeScript",
    "ts",
    "Vue",
    "Angular",
    "React",
    "Static Code Analysis",
    "Code Quality",
    "Python",
    "Infrastructure as Code",
    "IaC",
    "Kubernetes",
    "Terraform"
  ],
  "activationEvents": [
    "onWebviewPanel:snyk.views.suggestion.code",
    "onWebviewPanel:snyk.views.suggestion.oss",
    "*"
  ],
  "main": "./out/extension.js",
  "types": "./out/extension.d.ts",
  "contributes": {
    "mcpServerDefinitionProviders": [
      {
        "id": "snyk-security-scanner",
        "label": "Snyk"
      }
    ],
    "configuration": [
      {
        "id": "snyk",
        "title": "Snyk Security",
        "properties": {}
      },
      {
        "id": "account",
        "title": "Snyk Account",
        "order": 1,
        "properties": {
          "snyk.advanced.authenticationMethod": {
            "order": 1,
            "type": "string",
            "default": "OAuth2 (Recommended)",
            "description": "Specifies whether to authenticate with OAuth2, PAT, or with an API token (Legacy). \n\nNote: OAuth2 authentication is recommended as it provides enhanced security.",
            "enum": [
              "OAuth2 (Recommended)",
              "Personal Access Token",
              "API Token (Legacy)"
            ],
            "enumDescriptions": [
              "Uses the OAuth2 authentication.",
              "Uses Personal Access Token (PAT) authentication.",
              "Uses the legacy Snyk Token authentication."
            ],
            "markdownDescription": "Specifies whether to authenticate with OAuth2, PAT, or with an API token (Legacy). \n\nNote: OAuth2 authentication is recommended as it provides enhanced security."
          },
          "snyk.advanced.tokenStorage": {
            "order": 3,
            "type": "string",
            "enum": [
              "Always use VS Code's secret storage"
            ],
            "default": "Always use VS Code's secret storage",
            "markdownDescription": "Snyk uses VS Code's [secret storage](https://code.visualstudio.com/api/references/vscode-api#SecretStorage) to safely persist API token instead of saving it in plaintext in `settings.json`. To set the token manually, run the VS Code command [Snyk: Set Token](command:snyk.setToken)."
          },
          "snyk.advanced.customEndpoint": {
            "order": 2,
            "type": "string",
            "markdownDescription": "If you're using SSO with Snyk and OAuth2, the custom endpoint configuration is automatically populated. \n\nOtherwise, for public regional instances, see our [documentation](https://docs.snyk.io/working-with-snyk/regional-hosting-and-data-residency#available-snyk-regions). \n\nFor private instances, contact your team or account manager.",
            "scope": "machine",
            "pattern": "^(|(https?://)api.*.(snyk|snykgov).io)$"
          },
          "snyk.advanced.autoSelectOrganization": {
            "order": 4,
            "type": "boolean",
            "markdownDescription": "Use automatic organization selection. When enabled, Snyk will automatically select the most appropriate organization for your project using context found in your repository and your authentication. If an organization is configured manually, this feature will be overridden. If an appropriate organization cannot be identified automatically, the preferred organization defined in your [web account settings](https://app.snyk.io/account) will be used as a fallback.\n\n**Note:** This setting will be moved to the Snyk Settings page in a future release.",
            "scope": "resource",
            "default": true
          },
          "snyk.advanced.organization": {
            "order": 5,
            "type": "string",
            "markdownDescription": "Specify the organization (ID or name) for Snyk to run scans against. If the organization is provided manually, automatic organization selection is overridden. If the organization value is blank or invalid, the preferred organization defined in your [web account settings](https://app.snyk.io/account) will be used.\n\n**Note:** This setting will be moved to the Snyk Settings page in a future release.",
            "scope": "resource"
          },
          "snyk.yesCrashReport": {
            "order": 6,
            "type": "boolean",
            "default": true,
            "markdownDescription": "Send error reports to Snyk",
            "scope": "application"
          }
        }
      },
      {
        "id": "scan",
        "title": "Scan Configuration",
        "order": 2,
        "properties": {
          "snyk.features.openSourceSecurity": {
            "order": 1,
            "type": "boolean",
            "title": "Snyk Open Source security issues",
            "description": "Find and fix open source dependency issues.",
            "default": true
          },
          "snyk.features.codeSecurity": {
            "order": 2,
            "type": "boolean",
            "title": "Snyk Code security issues",
            "description": "Find and fix security issues in your application code in real time.\n\nFor these scans to run, Snyk Code must be enabled for your organization in Snyk settings.",
            "default": true
          },
          "snyk.features.infrastructureAsCode": {
            "order": 4,
            "type": "boolean",
            "title": "Snyk Infrastructure as Code issues",
            "description": "Find and fix your IaC misconfigurations.",
            "default": true
          },
          "snyk.features.secrets": {
            "order": 5,
            "type": "boolean",
            "title": "Snyk Secrets",
            "description": "[Closed Beta] Find and remediate hard-coded secrets in your codebase.",
            "default": false
          },
          "snyk.severity": {
            "order": 6,
            "type": "object",
            "default": {
              "critical": true,
              "high": true,
              "medium": true,
              "low": true
            },
            "properties": {
              "critical": {
                "type": "boolean",
                "default": true
              },
              "high": {
                "type": "boolean",
                "default": true
              },
              "medium": {
                "type": "boolean",
                "default": true
              },
              "low": {
                "type": "boolean",
                "default": true
              }
            },
            "additionalProperties": false,
            "description": "Severity issues to display.",
            "scope": "window"
          },
          "snyk.riskScoreThreshold": {
            "order": 6,
            "type": "integer",
            "minimum": 0,
            "maximum": 1000,
            "default": 0,
            "markdownDescription": "[Closed Beta] Filters Open Source issues by [risk score](https://docs.snyk.io/manage-risk/prioritize-issues-for-fixing/risk-score). Only issues with a risk score >= threshold are shown. Set to 0 to show all issues. This filter will apply in conjunction with other filters such as Severity and Issue View Options.",
            "scope": "window"
          },
          "snyk.issueViewOptions": {
            "order": 7,
            "type": "object",
            "default": {
              "openIssues": true,
              "ignoredIssues": false
            },
            "properties": {
              "openIssues": {
                "type": "boolean",
                "description": "Open Issues",
                "default": true
              },
              "ignoredIssues": {
                "type": "boolean",
                "description": "Ignored Issues",
                "default": false
              }
            },
            "additionalProperties": false,
            "markdownDescription": "[Code Consistent Ignores](https://docs.snyk.io/manage-risk/prioritize-issues-for-fixing/ignore-issues/consistent-ignores-for-snyk-code) helps your teams focus on important tasks by filtering out distractions. It ensures that once an ignore is created, it is consistently respected regardless of how and where the test is run and what branch is being tested.\n\nNote: These filters will have no effect if Code Consistent Ignores is disabled for the organization.\n\nShow the following issues:",
            "scope": "window"
          },
          "snyk.allIssuesVsNetNewIssues": {
            "type": "string",
            "default": "All issues",
            "description": "Specifies whether to see all issues or only net new issues. Net new issues option requires a Git repository, where it compares findings with those in the base branch.",
            "enum": [
              "All issues",
              "Net new issues"
            ],
            "enumDescriptions": [
              "Shows all issues that have been identified, including both new and existing issues.",
              "Shows only new issues filtering out previously known issues in a base branch"
            ],
            "order": 8
          },
          "snyk.advanced.additionalParameters": {
            "type": "string",
            "description": "Parameters to pass to Snyk CLI for Open Source security tests.",
            "scope": "window",
            "order": 9
          }
        }
      },
      {
        "id": "userExperience",
        "title": "User Experience",
        "order": 3,
        "properties": {
          "snyk.scanningMode": {
            "order": 1,
            "type": "string",
            "enum": [
              "auto",
              "manual"
            ],
            "enumDescriptions": [
              "Scan automatically in the background.",
              "Do not scan automatically, only scan when you run the `Snyk: Rescan` command."
            ],
            "default": "auto",
            "title": "Snyk Code scanning mode",
            "description": "Choose whether to run Snyk Code scans in the background, or only when you run the `Snyk: Rescan` command."
          },
          "snyk.advanced.autoScanOpenSourceSecurity": {
            "order": 2,
            "type": "boolean",
            "default": false,
            "description": "Run Snyk Open Source Security analysis in automatic mode.",
            "scope": "application"
          }
        }
      },
      {
        "id": "experimental",
        "title": "Experimental",
        "order": 4,
        "properties": {
          "snyk.securityAtInception.autoConfigureSnykMcpServer": {
            "order": 2,
            "type": "boolean",
            "description": "Configure Snyk MCP server",
            "default": false,
            "markdownDescription": "Configure Snyk MCP server",
            "scope": "window"
          },
          "snyk.securityAtInception.executionFrequency": {
            "order": 3,
            "type": "string",
            "description": "Choose when Snyk should scan and initiate fixes for your AI-generated code",
            "default": "Manual",
            "enum": [
              "On Code Generation",
              "Smart Scan",
              "Manual"
            ],
            "enumDescriptions": [
              "Executes scans and guides the agent to fix newly introduced vulnerabilities when the agent generates new code",
              "Similar to \"On Code Generation\" but leverages AI to determine when a security check is warranted in a given agent interaction",
              "The remediation of newly introduced issues will only take place when the agent is manually prompted to scan and fix security issues"
            ],
            "markdownDescription": "Choose when Snyk should scan and initiate fixes for your AI-generated code",
            "scope": "window"
          },
          "snyk.features.preview": {
            "order": 4,
            "type": "object",
            "default": {},
            "title": "Preview feature toggles",
            "description": "Preview features that are currently in development. Setting keys will be removed when features become stable.",
            "propertyNames": true,
            "properties": {
              "htmlSettings": {
                "type": "boolean",
                "default": true,
                "description": "Use new HTML-based settings UI instead of VS Code's native settings"
              },
              "htmlTreeView": {
                "type": "boolean",
                "default": false,
                "description": "Use server-driven HTML tree view instead of native tree views"
              }
            }
          }
        }
      },
      {
        "id": "initialization",
        "title": "Initialization",
        "order": 5,
        "properties": {
          "snyk.yesWelcomeNotification": {
            "order": 2,
            "type": "boolean",
            "default": true,
            "markdownDescription": "Show welcome notification after installation and restart",
            "scope": "application"
          },
          "snyk.trustedFolders": {
            "order": 1,
            "type": "array",
            "default": [],
            "description": "Folders to trust for Snyk scans.",
            "scope": "machine"
          }
        }
      },
      {
        "id": "cli",
        "title": "CLI & Language Server",
        "order": 6,
        "properties": {
          "snyk.advanced.automaticDependencyManagement": {
            "order": 1,
            "type": "boolean",
            "default": true,
            "scope": "machine",
            "markdownDescription": "Snyk will download, install and update dependencies for you. If this option is disabled, make sure valid paths to the dependencies are provided."
          },
          "snyk.advanced.cliBaseDownloadUrl": {
            "order": 2,
            "type": "string",
            "scope": "machine",
            "default": "https://downloads.snyk.io",
            "markdownDescription": "Base URL to download the CLI."
          },
          "snyk.advanced.cliReleaseChannel": {
            "order": 3,
            "type": "string",
            "default": "stable",
            "enum": [
              "stable",
              "rc",
              "preview"
            ],
            "scope": "machine",
            "markdownDescription": "CLI release channel."
          },
          "snyk.advanced.cliPath": {
            "order": 4,
            "type": "string",
            "scope": "machine",
            "markdownDescription": "Sets path to Snyk CLI extension dependency."
          }
        }
      }
    ],
    "viewsContainers": {
      "activitybar": [
        {
          "id": "snyk",
          "title": "Snyk",
          "icon": "media/images/snyk_extension_icon_new.svg"
        }
      ]
    },
    "views": {
      "snyk": [
        {
          "id": "snyk.views.welcome",
          "name": "Snyk",
          "when": "!snyk:loggedIn || snyk:error || !snyk:workspaceFound || snyk:authenticationChanged"
        },
        {
          "type": "webview",
          "id": "snyk.views.summary",
          "name": "SUMMARY",
          "when": "snyk:initialized && snyk:loggedIn && snyk:workspaceFound && !snyk:error",
          "content": "${scanSummaryHtml}"
        },
        {
          "id": "snyk.views.analysis.oss",
          "name": "Open Source Security",
          "when": "snyk:initialized && snyk:loggedIn && snyk:workspaceFound && !snyk:error && !snyk:htmlTreeViewEnabled"
        },
        {
          "id": "snyk.views.analysis.code.security",
          "name": "Code Security",
          "when": "snyk:initialized && snyk:loggedIn && snyk:codeEnabled && snyk:workspaceFound && !snyk:error && !snyk:htmlTreeViewEnabled"
        },
        {
          "id": "snyk.views.analysis.configuration",
          "name": "Configuration Issues",
          "when": "snyk:initialized && snyk:loggedIn && snyk:workspaceFound && !snyk:error && !snyk:htmlTreeViewEnabled"
        },
        {
          "id": "snyk.views.analysis.code.enablement",
          "name": "Code Security & Quality",
          "when": "snyk:initialized && snyk:loggedIn && !snyk:codeEnabled && snyk:workspaceFound && !snyk:error && !snyk:htmlTreeViewEnabled"
        },
        {
          "type": "webview",
          "id": "snyk.views.treeView",
          "name": "Snyk Results",
          "when": "snyk:initialized && snyk:loggedIn && snyk:workspaceFound && !snyk:error && snyk:htmlTreeViewEnabled"
        },
        {
          "id": "snyk.views.support",
          "name": "Help & feedback"
        }
      ]
    },
    "viewsWelcome": [
      {
        "view": "snyk.views.welcome",
        "contents": "Snyk has encountered a problem. Please restart the extension: \n[Restart](command:snyk.start 'Restart Snyk')\nIf the error persists, please check your [settings](command:snyk.settings) and [contact us](https://snyk.io/contact-us/?utm_source=vsc).\n\n You can check the logs to see the exact error in [Snyk Security](command:snyk.showOutputChannel) and [Snyk Language Server](command:snyk.showLsOutputChannel) output channels.\n[Display Error](command:snyk.showErrorFromContext)\n",
        "when": "snyk:error"
      },
      {
        "view": "snyk.views.welcome",
        "contents": "👋 Welcome to Snyk for Visual Studio Code.\n⏱️ Please wait, the extension is loading...",
        "when": "!snyk:error && !snyk:initialized"
      },
      {
        "view": "snyk.views.welcome",
        "contents": "👋 Let's secure your code! \nTo scan your project for issues, Snyk needs to:\n 1. Connect to your Snyk account: This allows us to securely analyse your code.\n2. Trust this workspace: This lets Snyk safely gather information about your project (like dependencies).\nYou should only scan projects you trust. [More info](https://docs.snyk.io/ide-tools/visual-studio-code-extension/workspace-trust)\nBy connecting your account with Snyk, you agree to the Snyk [Privacy Policy](https://snyk.io/policies/privacy), and the Snyk [Terms of Service](https://snyk.io/policies/terms-of-service).\n\n[Connect & Trust Workspace](command:snyk.initiateLogin 'Connect with Snyk')",
        "when": "!snyk:error && snyk:initialized && !snyk:loggedIn && !snyk:authMethodChanged"
      },
      {
        "view": "snyk.views.welcome",
        "contents": "⚠️ Your authentication method has changed.\n\n👉 Please re-authenticate to continue using Snyk\n\nBy connecting your account with Snyk, you agree to the Snyk [Privacy Policy](https://snyk.io/policies/privacy), and the Snyk [Terms of Service](https://snyk.io/policies/terms-of-service).\n\n[Connect & Trust Workspace](command:snyk.initiateLogin 'Re-authenticate')",
        "when": "!snyk:error && snyk:initialized && !snyk:loggedIn && snyk:authMethodChanged"
      },
      {
        "view": "snyk.views.welcome",
        "contents": "We are now redirecting you to our auth page, go ahead and log in. If a browser window doesn't open after a few seconds, please copy the url below and manually paste it in a browser.\n[Copy URL to clipboard](command:snyk.copyAuthLink 'Copy URL to clipboard')",
        "when": "!snyk:error && snyk:initialized && !snyk:loggedIn && snyk:authenticating"
      },
      {
        "view": "snyk.views.analysis.code.enablement",
        "contents": "Thanks for connecting with Snyk. ✅\n 👉 You are almost set 🤗.\n[Enable Snyk Code and start analysing](command:snyk.enableCode 'Upload code to Snyk')\nIt looks like your organization's configuration is disabled, that's why you are seeing this message. You can easily enable it by pressing the above button and switching it on.\nWe apologize for the inconvenience and please [contact us](https://snyk.io/contact-us/?utm_source=vsc) if you have any other questions or concerns!"
      },
      {
        "view": "snyk.views.welcome",
        "contents": "Open a workspace or a folder in Visual Studio Code to start the analysis.",
        "when": "!snyk:error && snyk:initialized && snyk:loggedIn && !snyk:workspaceFound"
      }
    ],
    "menus": {
      "view/title": [
        {
          "command": "snyk.start",
          "when": "view == 'snyk.views.summary' || view == 'snyk.views.analysis.code.security' || view == 'snyk.views.analysis.code.security.delta' || view == 'snyk.views.analysis.code.quality' || view == 'snyk.views.analysis.code.quality.delta' || view == 'snyk.views.analysis.oss' || view == 'snyk.views.analysis.configuration'",
          "group": "navigation"
        },
        {
          "command": "snyk.settings",
          "when": "view == 'snyk.views.summary' || view == 'snyk.views.analysis.code.security' || view == 'snyk.views.analysis.code.security.delta' || view == 'snyk.views.analysis.code.quality' || view == 'snyk.views.analysis.code.quality.delta' || view == 'snyk.views.analysis.oss' || view == 'snyk.views.welcome' || view == 'snyk.views.analysis.configuration'",
          "group": "navigation"
        }
      ],
      "commandPalette": [
        {
          "command": "snyk.login",
          "when": "!snyk:loggedIn"
        },
        {
          "command": "snyk.initiateLogout",
          "when": "snyk:loggedIn"
        },
        {
          "command": "snyk.dcignore",
          "when": "!snyk:error && snyk:loggedIn && snyk:codeEnabled && snyk:workspaceFound"
        }
      ]
    },
    "commands": [
      {
        "command": "snyk.start",
        "title": "Rescan",
        "category": "Snyk",
        "icon": "$(run)"
      },
      {
        "command": "snyk.settings",
        "title": "Settings",
        "category": "Snyk",
        "icon": "$(gear)"
      },
      {
        "command": "snyk.login",
        "title": "Log In",
        "category": "Snyk",
        "icon": "$(sign-in)"
      },
      {
        "command": "snyk.setToken",
        "title": "Set Token",
        "category": "Snyk",
        "icon": "$(sign-in)"
      },
      {
        "command": "snyk.initiateLogout",
        "title": "Log Out",
        "category": "Snyk",
        "icon": "$(sign-out)"
      },
      {
        "command": "snyk.dcignore",
        "title": "Create dcignore File",
        "category": "Snyk",
        "icon": "$(new-file)"
      },
      {
        "command": "snyk.showOutputChannel",
        "title": "Show Output Channel",
        "category": "Snyk"
      },
      {
        "command": "snyk.showLsOutputChannel",
        "title": "Show Language Server Output Channel",
        "category": "Snyk"
      },
      {
        "command": "snyk.clearPersistedCache",
        "title": "Clear Persisted Cache",
        "category": "Snyk"
      },
      {
        "command": "snyk.collectConnectivityDiagnostics",
        "title": "Collect Connectivity Diagnostics",
        "category": "Snyk"
      },
      {
        "command": "snyk.collectDirectoryDiagnostics",
        "title": "Collect Directory Diagnostics",
        "category": "Snyk"
      }
    ]
  },
  "scripts": {
    "vscode:prepublish": "tsc -p ./ && sass media --no-source-map",
    "build": "npm run vscode:prepublish",
    "clean": "rm -rf ./out",
    "rebuild": "npm run clean && npm run build",
    "watch": "tsc -watch -p ./",
    "watch-resources": "sass media --no-source-map --watch",
    "watch-all": "concurrently --kill-others 'npm run watch' 'npm run watch-resources'",
    "pretest": "npm run rebuild",
    "test:unit:single": "mocha --ui tdd --require ts-node/register",
    "test:unit": "npm run rebuild && mocha --ui tdd -c 'out/test/unit/**/*.test.js'",
    "test:unit:watch": "npm run rebuild && mocha --ui tdd -w -c 'out/test/unit/**/*.test.js'",
    "test:integration": "npm run rebuild && node ./out/test/integration/runTest.js",
    "lint": "npx eslint \"src/**/*.ts\"",
    "lint:fix": "npx eslint --fix \"src/**/*.ts\"",
    "vscode:uninstall": "node ./out/uninstall",
    "patch-preview": "node ./scripts/patchPreview.js"
  },
  "devDependencies": {
    "@amplitude/ampli": "^1.36.2",
    "@types/babel__traverse": "^7.12.2",
    "@types/diff": "^5.0.9",
    "@types/find-package-json": "^1.2.2",
    "@types/glob": "^8.1.0",
    "@types/he": "^1.2.3",
    "@types/lodash": "^4.17.0",
    "@types/marked": "^6.0.0",
    "@types/mocha": "^8.0.3",
    "@types/needle": "^2.5.2",
    "@types/node": "^18.19.26",
    "@types/sinon": "^10.0.2",
    "@types/uuid": "^8.3.0",
    "@types/validate-npm-package-name": "^3.0.3",
    "@types/vscode": "1.76.0",
    "@typescript-eslint/eslint-plugin": "^7.4.0",
    "@typescript-eslint/parser": "^7.4.0",
    "@vscode/test-electron": "^2.4.0",
    "concurrently": "^7.0.0",
    "eslint": "^8.57.0",
    "eslint-config-prettier": "^8.5.0",
    "eslint-import-resolver-typescript": "^3.6.1",
    "eslint-plugin-import": "^2.29.1",
    "eslint-plugin-prettier": "^4.0.0",
    "mocha": "10.1.0",
    "prettier": "^2.6.1",
    "sass": "^1.48.0",
    "sinon": "^11.1.1",
    "ts-node": "^10.7.0",
    "typescript": "^5.4.3",
    "vscode-test": "^1.4.0",
    "yalc": "^1.0.0-pre.44"
  },
  "dependencies": {
    "@amplitude/experiment-node-server": "^1.8.2",
    "@babel/parser": "^7.23.9",
    "@babel/traverse": "^7.23.9",
    "@babel/types": "^7.23.9",
    "@deepcode/dcignore": "^1.0.4",
    "glob": "^12.0.0",
    "he": "^1.2.0",
    "http-proxy-agent": "^5.0.0",
    "https-proxy-agent": "^5.0.0",
    "lodash": "^4.18.1",
    "marked": "^11.2.0",
    "needle": "^3.3.1",
    "open": "^7.4.2",
    "request-light": "^0.8.0",
    "rxjs": "^7.8.1",
    "string-argv": "^0.3.2",
    "uuid": "^8.3.2",
    "validate-npm-package-name": "^3.0.0",
    "vscode-languageclient": "8.1.0",
    "vscode-languageserver-textdocument": "^1.0.10"
  },
  "overrides": {
    "vscode-languageclient": {
      "minimatch": "==5.1.9"
    }
  }
}