Actions7
Scan VS Code Extension
AI-generatedSummary
Scan a VS Code extension for security threats
Inputs
- vscodeExtensionId (required) — The VS Code extension ID (e.g., publisher.extension-name)
- options — Configuration for scan behavior (headless mode, timeout in ms, disable AI analysis)
Output shape
An array of objects, each containing extensionId, name, status, score, permissions, threats, scanUrl, and timestamp describing the scan result.
All fields are present; error conditions return a single item with an 'error' field if continueOnFail is false.
Examples
Example 1: Scan a specific VS Code extension
Set operation to scanVSCodeExtension, provide vscodeExtensionId, optionally adjust options such as headless false and timeout 60000.
Example 2: Batch scan extensions from a list
Pass multiple items with different vscodeExtensionId values; options can be left at defaults.
Example 3: Run as a scheduled automation
Trigger the workflow on a schedule; use default options to scan all configured extensions.