Skip to main content

​
Overview

The Secure Annex code extension offers a way to collection code extension inventories and protect developers from malicious extensions. The extension supports VS Code, Cursor, and Windsurf code editors. The extension can be installed from the Visual Studio Marketplace and Open VSX. A single installation will protect extensions across all aforementioned code editors.

​
Install

Visual Studio Marketplace Open VSX

​
Setup

You must be a Secure Annex customer to use this extension
  1. Install the extension from the marketplace
  2. Configure your ingestion endpoint using the Command Palette: Secure Annex: Configure
  3. Test connection to ensure everything is working: Secure Annex: Test Connection

​
Options

Configure the extension through VS Code Settings (Ctrl+, / Cmd+,):
SettingDescriptionDefault
secureAnnex.endpointAPI endpoint URL
secureAnnex.scanIntervalScan interval in minutes60
secureAnnex.sendUserDetailsInclude username and hostname in communication with Secure Annexfalse

​
Enterprise deployment

The extension can be installed easily through a command line script: code --install-extension secureannex.secure-annex-extension-manager Replace code with cursor or windsurf to install with those code editors. Registry values can be set to configure the extension.

​
Windows

Set values under HKEY_LOCAL_MACHINE\SOFTWARE\SecureAnnex:
Value NameTypeDescriptionExample
endpointREG_SZ (String)API endpoint URLhttps://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}
sendUserDetailsREG_DWORDSend username/hostname (1=true, 0=false)0
scanIntervalREG_DWORDScan interval in minutes60 (decimal)
autoUninstallREG_DWORDAuto-uninstall blocked extensions (1=true, 0=false)1
Example: Set endpoint via command line (requires admin privileges): 
reg add "HKLM\SOFTWARE\SecureAnnex" /v endpoint /t REG_SZ /d "https://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}" /f
reg add "HKLM\SOFTWARE\SecureAnnex" /v sendUserDetails /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\SecureAnnex" /v scanInterval /t REG_DWORD /d 60 /f
reg add "HKLM\SOFTWARE\SecureAnnex" /v autoUninstall /t REG_DWORD /d 1 /f

​
Mac

Set values in /Library/Preferences/com.secureannex.plist:
KeyTypeDescriptionExample
endpointStringAPI endpoint URLhttps://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}
sendUserDetailsBoolean or IntegerSend username/hostname (1 or true)0 or false
scanIntervalIntegerScan interval in minutes60
autoUninstallBoolean or IntegerAuto-uninstall blocked extensions (1 or true)1 or true
Example: Set endpoint via command line (requires admin privileges): 
defaults write /Library/Preferences/com.secureannex endpoint "https://api.secureannex.com/v0/organization/{organization_id}/integration/{integration_id}"
defaults write /Library/Preferences/com.secureannex sendUserDetails -bool false
defaults write /Library/Preferences/com.secureannex scanInterval -int 60
defaults write /Library/Preferences/com.secureannex autoUninstall -bool true
⌘I