#25 - Visual Studio 2022 Plugin now supported

Features

• Visual Studio IDE plugin: Scan your Microsoft Visual Studio 2022 projects for secrets, API keys, and security vulnerabilities (SAST) - while coding

• License gating: You can now block pull requests for Github, GitLab (Cloud & On-prem), Bitbucket, Azure (contact us to enable this feature)

• Unhealthy package detection: Aikido Intel’s AI based Malware feed can now detect packages that contain suspicious code like calling external services, using typical obfuscation patterns, and more - these issues are marked as high.

Improvements

• GitHub CI: We now use signed commits for commits coming from Aikido

• Expanded SAST support: First Rust rules are launched

• Code analysis modal: You can now explore multi-file analysis paths

• Domains: You can now link REST & GraphQL domains to a repo or container

• Status page: You can now subscribe to get alerts for incidents

• Task autocreation: You can now set the scope level

• Aikido Issue Detail Sidebar: You can now see an activity log for every issue in the issue detail sidebar.

• Opengrep: Brought back Elixir support, we now publish ARM binaries for Linux, We improved the parsing of verbatim strings and raw string literals in C#, We added a new flag --𝚘𝚞𝚝𝚙𝚞𝚝-𝚎𝚗𝚌𝚕𝚘𝚜𝚒𝚗𝚐-𝚌𝚘𝚗𝚝𝚎𝚡𝚝 that can be added to the 𝚜𝚌𝚊𝚗 command

Vulnerability Database

Our research team has discovered over 42 new vulnerabilities over the last two weeks!