Secure Annex code extension

Overview

The Secure Annex code extension offers a way to collection code extension inventories and protect developers from malicious extensions. The extension supports VS Code, Cursor, and Windsurf code editors. The extension can be installed from the Visual Studio Marketplace and Open VSX. A single installation will protect extensions across all aforementioned code editors.

Install

Visual Studio Marketplace Open VSX

Setup

You must be a Secure Annex customer to use this extension

Install the extension from the marketplace
Configure your integration endpoint using the Command Palette: Secure Annex: Configure
Test connection to ensure everything is working: Secure Annex: Test Connection

Options

Configure the extension through VS Code Settings (Ctrl+, / Cmd+,):

Setting	Description	Default
`secureAnnex.endpoint`	API endpoint URL
`secureAnnex.scanInterval`	Scan interval in minutes	`60`
`secureAnnex.sendUserDetails`	Include username and hostname in communication with Secure Annex	`false`

Enterprise deployment

The extension can be installed easily through a command line script: code --install-extension secureannex.secure-annex-extension-manager Replace code with cursor or windsurf to install with those code editors. Registry values can be set to configure the extension.

Windows

Set values under HKEY_LOCAL_MACHINE\SOFTWARE\SecureAnnex:

Value Name	Type	Description	Example
`endpoint`	`REG_SZ` (String)	API endpoint URL	`https://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}`
`sendUserDetails`	`REG_DWORD`	Send username/hostname (1=true, 0=false)	`0`
`scanInterval`	`REG_DWORD`	Scan interval in minutes	`60` (decimal)
`autoUninstall`	`REG_DWORD`	Auto-uninstall blocked extensions (1=true, 0=false)	`1`

Example: Set endpoint via command line (requires admin privileges):

reg add "HKLM\SOFTWARE\SecureAnnex" /v endpoint /t REG_SZ /d "https://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}" /f
reg add "HKLM\SOFTWARE\SecureAnnex" /v sendUserDetails /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\SecureAnnex" /v scanInterval /t REG_DWORD /d 60 /f
reg add "HKLM\SOFTWARE\SecureAnnex" /v autoUninstall /t REG_DWORD /d 1 /f

Mac

Set values in /Library/Preferences/com.secureannex.plist:

Key	Type	Description	Example
`endpoint`	String	API endpoint URL	`https://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}`
`sendUserDetails`	Boolean or Integer	Send username/hostname (1 or true)	`0` or `false`
`scanInterval`	Integer	Scan interval in minutes	`60`
`autoUninstall`	Boolean or Integer	Auto-uninstall blocked extensions (1 or true)	`1` or `true`

Example: Set endpoint via command line (requires admin privileges):

defaults write /Library/Preferences/com.secureannex endpoint "https://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}"
defaults write /Library/Preferences/com.secureannex sendUserDetails -bool false
defaults write /Library/Preferences/com.secureannex scanInterval -int 60
defaults write /Library/Preferences/com.secureannex autoUninstall -bool true

Get started

Features

Integrations

Guides

Overview

Install

Setup

Options

Enterprise deployment

Windows

Mac

​Overview

​Install

​Setup

​Options

​Enterprise deployment

​Windows

​Mac

Overview

Install

Setup

Options

Enterprise deployment

Windows

Mac