Releases: POSIdev-community/AI.Plugin.VisualStudio
Releases · POSIdev-community/AI.Plugin.VisualStudio
Release 0.1.0 (Alpha)
Added
- Vulnerability Triage: Confirm, reject, or suppress found vulnerabilities using buttons in the Details window, context menus, or Quick Actions.
- Filtering: Ability to filter scan results by severity, status, and exclusion in the PT Application Inspector tool window.
- Quick Fixes: Support for Visual Studio Quick Actions (Alt+Enter) to manage vulnerabilities directly from the code editor.
- Plugin Options: New settings page in
Tools->Optionsto configure log levels, automatic activation, and hardware resource utilization. - Manual Installation: Detailed instructions for manual analyzer installation in offline environments.
Changed
- Improved README documentation with clearer instructions and visual guides (GIFs).
- Synchronized English and Russian versions of the documentation.
- Updated third-party license notices.
Release 0.0.1 (Preview)
V0.0.1: Initial Preview Release
We are excited to announce the first Alpha release of PT Application Inspector for Visual Studio! This extension brings powerful Static Application Security Testing capabilities directly into your IDE.
Note: This is a Preview release. Some advanced features (triaging, server integration) are currently under development.
✨ Features
- Native SAST Scanning: Scan your Solution for vulnerabilities without leaving Visual Studio.
- Broad Language Support: Detects security flaws in C#, C/C++, Java, JavaScript, Python, PHP, Go, and more.
- Visual Studio Integration:
- Vulnerabilities are listed directly in the standard Error List.
- Double-click navigation jumps straight to the vulnerable code.
- Interactive Vulnerability Details:
- Detailed Description: Comprehensive information about the vulnerability type, severity, and potential business impact.
- Data Flow Analysis: Visualize the attack vector from entry point to exit point with step-by-step code navigation.
- Exploit Generation: View automatically generated HTTP requests to verify vulnerabilities.
- Additional Conditions: Lists specific prerequisites (such as configuration settings or environment states) required to reproduce the vulnerability.
- Analyzer Management: The extension automatically downloads and installs the required analyzer backend.
- Scan Configuration: Support for per-solution configuration via
.aiproj.json.