microsoft/DevSkim

View on GitHub

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

Stars: 1k
Forks: 131
Open beginner issues: 0
Indexed issues: 62
Avg merge: 1m
Merged PRs (30d): 1

Dominant language: C#
License: MIT
Last GitHub push: Aug 16, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

62 open issues indexed

Add boolean-expression rules now that ApplicationInspector 1.10.2 fixes the verifier Open

microsoft/DevSkim#785 · 1 reaction · 2 assignees · Opened Sep 10, 2026
Outdated VS Code extension release Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

microsoft/DevSkim#751 · Opened May 20, 2026
How to match files without a file extension? Open

enhancement

microsoft/DevSkim#747 · 4 comments · 1 reaction · 2 assignees · Opened May 7, 2026
Support for HTML (see attached example rule) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

microsoft/DevSkim#746 · Opened May 7, 2026
Can I use DevSkim to detect and flag based not on file content but file name, file extension, existence or other file metadata? Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/DevSkim#744 · 1 comment · Opened May 5, 2026
False positive in XML: partial substring match inside larger identifier Open

microsoft/DevSkim#734 · 1 reaction · 2 assignees · Opened Mar 26, 2026
Include Suppressed Results in SARIF Output Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 42/100

microsoft/DevSkim#693 · 1 comment · 4 reactions · Opened Jul 4, 2025
Seems not compatible to visual studio 2022. Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/DevSkim#690 · 3 comments · 2 reactions · Opened Jun 10, 2025
Planned Deprecation: VS 2022 Extension Open

Feedback

Difficulty 5/5 Over a week Newbie friendliness 15/100

microsoft/DevSkim#684 · 3 comments · 4 reactions · Opened Apr 10, 2025
Add On-Demand Scan Command and Trigger On Settings Change Open

enhancement VSCode

microsoft/DevSkim#674 · 2 reactions · 2 assignees · Opened Jan 8, 2025
Preprocessing before matching in custom rules? Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#671 · 3 comments · Opened Dec 7, 2024
VSCode should surface `BestPractice` or `ManualReview` severity rules in problems window Open

enhancement VSCode

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/DevSkim#670 · 7 comments · Opened Dec 6, 2024
Is it possible to match something that is missing in a file? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 32/100

microsoft/DevSkim#668 · 5 comments · Opened Dec 6, 2024
(Parent) directory matcher Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#667 · 1 comment · Opened Dec 6, 2024
JSONschema support for custom DevSkim rules Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/DevSkim#666 · 8 comments · 1 reaction · Opened Dec 5, 2024
Documentation or examples on how and where I can use YmlPath Open

Documentation

Difficulty 3/5 1-2 days Newbie friendliness 30/100

microsoft/DevSkim#661 · 5 comments · Opened Dec 5, 2024
Writing custom rules to apply on Dockerfile? Open

bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#660 · 2 comments · Opened Dec 5, 2024
Custom DevSkim rules (on yaml files) not showing in VSCode custom tab Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/DevSkim#659 · 18 comments · Opened Dec 5, 2024
binaries are not digitally signed Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/DevSkim#648 · 1 comment · 1 reaction · Opened Oct 25, 2024
[False Positive] DS106863 - The DES cipher was found, which is widely considered to be broken. Open

false positive

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/DevSkim#645 · 1 comment · Opened Sep 16, 2024
How to supress a warning in the next line Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/DevSkim#625 · 1 comment · 3 reactions · Opened Aug 8, 2024
Quick actions (lightbulb) does not auto select the first suggestion Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/DevSkim#623 · 2 comments · Opened Jul 5, 2024
Add support as Roslyn Analyzer Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

microsoft/DevSkim#619 · 3 comments · Opened Jun 12, 2024
Add DevSkim GitHub action support for Windows Open

backlog enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/DevSkim#618 · 3 comments · Opened Jun 12, 2024
Populate Security-Severity Value Open

enhancement rule

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#608 · Opened Feb 29, 2024
No "Scanned Files" Displayed Open

enhancement external

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/DevSkim#604 · 2 comments · Opened Feb 14, 2024
Add Export Report option to IDE Open

backlog enhancement VSCode

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/DevSkim#597 · 3 comments · Opened Jan 3, 2024
Support Suppressions for file types without comments Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#594 · 1 comment · 1 reaction · Opened Dec 4, 2023
Guidance for 172411 is missing Open

bug Documentation

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/DevSkim#593 · 1 comment · Opened Nov 30, 2023
CLI Suppress Command Does not properly comment XML suppressions Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/DevSkim#588 · Opened Sep 18, 2023
Dotnet process is spawned multiple times Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/DevSkim#570 · 3 comments · Opened Jul 18, 2023
Confusing help text for `-g`/`--ignore-globs` option Open

bug external

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/DevSkim#567 · 7 comments · Opened Jul 7, 2023
Allow User to "Bring Their Own" Runtime for the Language Server for VS Code Extension Open

enhancement VSCode

Difficulty 4/5 3-5 days Newbie friendliness 38/100

microsoft/DevSkim#566 · Opened Jul 7, 2023
Add Scan All Workspace Files Command to DevSkim VS Code Open

enhancement VSCode

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/DevSkim#564 · 4 comments · 1 reaction · Opened Jun 30, 2023
DS440100 - False Positive Open

false positive rule

microsoft/DevSkim#545 · 3 comments · 1 assignee · Opened May 30, 2023
Add Validation of Fix objects to DevSkimRulesVerifier Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/DevSkim#539 · Opened May 25, 2023
Add Confidence Levels to Default Rules Open

enhancement rule

microsoft/DevSkim#538 · 1 reaction · 1 assignee · Opened May 25, 2023
Improve Sarif Output Format with the MappedTo property Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/DevSkim#535 · Opened May 25, 2023
RulesVerifier should ensure that at least one of Recommendation or Description is filled in a Rule Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/DevSkim#531 · 1 comment · Opened May 24, 2023
Update Guidance documents Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/DevSkim#498 · Opened Apr 27, 2023
VS extension pre-releases not marked as preview in IDE Open

bug pipeline

microsoft/DevSkim#491 · 1 assignee · Opened Apr 24, 2023
Improve DS440000 rule Open

false positive rule

microsoft/DevSkim#467 · 1 assignee · Opened Mar 17, 2023
Add progress bar like Application Inspector Open

backlog enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

microsoft/DevSkim#392 · Opened Aug 11, 2022
GUI rules editor Open

backlog enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#383 · Opened Jun 24, 2022
Objective-C Rules Open

help wanted rule

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#360 · Opened Jan 19, 2022
Swift Rules Open

help wanted rule

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/DevSkim#359 · Opened Jan 19, 2022
Binaries on macOS are not notarized for GateKeeper Open

bug pipeline

microsoft/DevSkim#327 · 1 comment · 1 reaction · 1 assignee · Opened Oct 12, 2021
Review Devskim: Finding DS104456(DS104456) for appropriate severity level Open

rule

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/DevSkim#265 · 2 comments · Opened Feb 12, 2021
SSL Detection Rule is too Broad Open

false positive rule

microsoft/DevSkim#231 · 1 comment · 1 assignee · Opened Oct 1, 2020
Scala Rules Open

help wanted rule

Difficulty 5/5 Over a week Newbie friendliness 15/100

microsoft/DevSkim#223 · Opened Aug 17, 2020

microsoft/DevSkim

Get new issues in your inbox