← All help articles

VS Code extension — install and configuration

The VS Code extension catches leaked secrets and vulnerable dependencies directly in your editor, and shows your org's open finding count in the status bar.

Quick install

  1. Dashboard → Integrations → VS Code extension to find your API token.
  2. Install the extension from the VS Code Marketplace (search "NoDowntimeShield") or load the .vsix via Extensions → ⋯ → Install from VSIX….
  3. Run NoDowntimeShield: Sign in from the command palette and paste your API token — it's stored in VS Code's SecretStorage, never in plaintext settings.

What it does

  • Inline secret highlighting — AWS keys, Stripe live secrets, GitHub PATs, Slack tokens, OpenAI/Anthropic keys, SendGrid, Mailgun, Twilio, JWTs, private-key blocks, and DB URIs flag as you type.
  • Scan this repo — sends package.json / requirements.txt / composer.json to the platform's dependency-scan API and reports CVE-affected packages.
  • Status bar counter — shows the number of open critical and high findings for your organisation.

Privacy

Inline secret scanning is fully local — nothing leaves your machine. Only the explicit "scan repo" and "refresh findings" commands call the platform API.