VS Code Proxy Setup

Use this guide when your network requires a proxy for outbound traffic to Aikido in VS Code.

Configuration

1. Open VS Code Settings (Cmd+, on macOS, Ctrl+, on Windows/Linux).

2. Search for proxy.

3. Set Http: Proxy Support to override (or on if your environment already handles proxying correctly). Http: Proxy Support

   
4. Set Http: Proxy to your proxy URL (for example: http://proxy.company.local:8080). Http: Proxy

   
5. Keep Http: Proxy Strict SSL enabled (true) whenever possible. Http: Proxy Strict SSL

   • Use true when your proxy/server certificate chain is trusted (public CA or correctly installed corporate CA).

   • If your company uses TLS inspection or custom/self-signed certs, true can fail with trust errors until that CA is installed.

   • Preferred fix: add the corporate CA cert (PEM) via aikido.extraCaCerts (or NODE_EXTRA_CA_CERTS) so validation still stays enabled.

   • Only set Http: Proxy Strict SSL to false as a temporary troubleshooting step in controlled environments; revert to true after certificate trust is configured.

   
6. Reload VS Code (Developer: Reload Window).

7. Open or save a file to trigger an Aikido scan.

Alternative set-up with `settings.json`

Example settings.json:

{
  "http.proxySupport": "override",
  "http.proxy": "http://proxy.company.local:8080",
  "http.proxyStrictSSL": true
}

If your Company uses an Authenticated Proxy

Http: Proxy Authorization

Preferred:

{
  "http.proxyAuthorization": "Basic <base64(username:password)>"
}

Alternative:

{
  "http.proxy": "http://username:[email protected]:8080"
}

If your company uses TLS inspection

Aikido: Extra Ca Certs

If your proxy re-signs certificates, add your corporate CA bundle:

{
  "aikido.extraCaCerts": "/absolute/path/to/corporate-ca.pem"
}

Verify Connection

• Reload VS Code after proxy changes.

• Trigger an Aikido scan by opening/saving a file.

• Confirm there are no proxy authentication or TLS trust errors in logs.

• Run an SCA scan and confirm dependency downloads succeed.

Common Fixes

• 407 Proxy Authentication Required

  • Re-check http.proxyAuthorization format (Basic ...).

  • If needed, validate credentials using the proxy-URL credential format.

• TLS errors (self-signed, unable to verify, certificate unknown)

  • Set a valid aikido.extraCaCerts path (or NODE_EXTRA_CA_CERTS).

  • Keep http.proxyStrictSSL: true whenever possible.

  • Reload VS Code after certificate changes.

• Proxy not used

  • Ensure http.proxySupport is not off.

  • Ensure one of http.proxy, HTTPS_PROXY, or https_proxy is configured.

  • Reload VS Code after updates.