VS Code Extension

Check your changes before you commit, without leaving the editor. Findings appear in the Problems panel and under the line they point at, with the fix and a CWE link where one applies. The extension uses the same rules and gate as the pull request check and the CLI.

1. Install

Open the Extensions view (Ctrl+Shift+X, or Cmd+Shift+X on macOS), search for Zelsis and select Install. You can also install it from the Visual Studio Marketplace or from a terminal:

code --install-extension zelsis.zelsis

2. Add your API key

In the dashboard open Settings → API keys and create a key. In VS Code open the Command Palette (Ctrl+Shift+P) and run Zelsis: Set API Key. The key is kept in the editor's secret storage. A ZELSIS_API_KEY environment variable works too.

3. Run a check

Open a folder that is a git repository and run one of these from the Command Palette:

Zelsis: Check Changed Files scans your uncommitted changes. The rest of the repository goes along as context, but only the files you changed decide the result.
Zelsis: Check Whole Workspace gates on every file.
Zelsis: Clear Findings removes the results from the editor.

Each finding shows as a problem: critical and high as errors, medium as warnings, low as information. Hover the line to read the fix, and select the code (for example ZLS-33 CWE-78) to open the CWE entry. The status bar shows the gate result and the number of findings; select it to run the check again.

Settings

zelsis.url: the server to use. The default is https://zelsis.com.

What is sent

Files are scanned in memory on the Zelsis server and are not stored. Build folders, binaries and lockfiles are not sent. On the free plan the fix text is replaced by a short note, as in the dashboard.