Skip to content

VS Code Extension

The Ribix VS Code extension surfaces findings inline as you code, lets you approve or reject fixes without leaving the editor, and gives you a one-click way to trigger agent runs and manage your staging connector.

Installation

Search for Ribix in the VS Code Extensions panel (Ctrl+Shift+X / Cmd+Shift+X) or install from the command line:

code --install-extension ribix.ribix-vscode

After installation, open the Command Palette (Ctrl+Shift+P / Cmd+Shift+P) and run Ribix: Sign In to authenticate with your workspace.

Features

Inline findings

Findings appear as gutter decorations and squiggles on the affected lines. Hover over a finding to see the severity, category, and a short description. Click to open the full finding detail panel with the generated test, the proposed fix diff, and the approval controls.

Findings sidebar

The Ribix sidebar lists all findings for your workspace, grouped by repository. Filter by severity (critical, high, medium, low), by category (rate limit, data loss, env parity, etc.), or by status (open, approved, rejected). Use Ribix: Search Findings to search by keyword.

Approval queue

Open the approval queue (Ribix: Open Approval Queue) to review all pending fixes in a single panel. Each entry shows the finding summary, the test Ribix wrote, and the fix diff. Approve to open the PR; reject to dismiss.

Trigger agent runs

Run Ribix: Trigger Agent Run from the Command Palette to start a proactive scan on the current repository without pushing a commit. Useful for on-demand checks before a release.

Staging connector management

Configure and test your staging connector from the editor using Ribix: Configure Staging Environment and Ribix: Test Staging Connection. No need to switch to the dashboard.

Requirements

VS Code 1.97.0 or later. A Ribix workspace on any paid plan (Solo, Team, or Enterprise). The extension connects to your configured ribix.apiUrl - defaults to the Ribix cloud; self-hosted installations set this to their own endpoint.

Settings

SettingDefaultDescription
ribix.apiUrlhttps://api.ribix.devBackend API endpoint.
ribix.appUrlhttps://app.ribix.devDashboard URL for OAuth and deep links.
ribix.showDecorationstrueShow inline gutter markers for findings.
ribix.autoRefreshInterval30Seconds between automatic findings refreshes. Set to 0 to disable.

Changing ribix.apiUrl or ribix.appUrl at runtime requires a window reload (Developer: Reload Window) to take effect.

All commands

CommandIDDescription
Ribix: Sign Inribix.signInAuthenticate with your Ribix workspace.
Ribix: Sign Outribix.signOutSign out and clear stored credentials.
Ribix: Configure Connectionribix.configureSet API URL, app URL, and workspace.
Ribix: Configure Staging Environmentribix.configureStagingEnvironmentAdd or update your staging connector directly from the editor.
Ribix: Test Staging Connectionribix.testStagingConnectionVerify the staging connector is reachable.
Ribix: Trigger Agent Runribix.triggerAgentRunStart a proactive scan on the current repository.
Ribix: Open Findings Panelribix.openFindingsPanelOpen the findings sidebar.
Ribix: Refresh Findingsribix.refreshFindingsReload findings from the backend.
Ribix: Filter Findingsribix.filterFindingsFilter by severity, category, or status.
Ribix: Approve Fixribix.approveFindingApprove the generated fix - Ribix opens the PR.
Ribix: Reject Findingribix.rejectFindingReject a finding without applying the fix.
Ribix: Mark as False Positiveribix.markFalsePositiveFlag a finding as a false positive to improve future accuracy.
Ribix: Ignore this findingribix.ignoreFindingSuppress this specific finding instance.
Ribix: Ignore all findings of this typeribix.ignoreFindingTypeAdd the finding category to your suppression list.
Ribix: Open Approval Queueribix.openApprovalQueueReview all pending fixes in one panel.
Ribix: Show / Hide Decorationsribix.showDecorationsToggle inline finding markers in the editor gutter.
Ribix: Switch Workspaceribix.switchWorkspaceSwitch between Ribix workspaces.
Ribix: Statusribix.statusShow current connection status and active workspace.