DEV Community: Rasheed

We Built a VS Code Extension That Triple-Checks AI-Generated Code for Security Vulnerabilities

Rasheed — Sat, 07 Mar 2026 16:22:40 +0000

Studies show roughly 40% of AI-generated code contains at least one exploitable vulnerability. We accept Copilot suggestions with a quick Tab press and move on. But who's checking the code your AI writes?

That's why I built CodeVigil, a VS Code extension that scans your code for security vulnerabilities in real time, right inside your editor.

How It Works

CodeVigil uses a three-layer scanning approach:

Regex pattern matching catches common vulnerability signatures
AST structural analysis understands code context and data flow
GitHub Copilot LLM verification reasons about whether a finding is a real risk

This triple-check approach catches issues that single-pass scanners miss. Findings show up as native VS Code diagnostics, just like TypeScript errors or ESLint warnings.

What You Get

100+ vulnerability patterns across 10 languages (JS/TS, Python, Java, C#, Go, PHP, Ruby, C/C++, Kotlin)
Copilot Chat integration with @codevigil for natural-language security questions
Local CVE database with 130,000+ known vulnerabilities for dependency scanning
Secret detection to catch hardcoded API keys and credentials
Severity-ranked diagnostics so you know what to fix first

Zero Config

Install it and it works. No accounts, no API keys, no configuration files. CodeVigil detects your project's languages and applies the right patterns automatically.

Try It

Search "CodeVigil" in the VS Code Extensions panel and hit Install. Open any project and it starts scanning immediately.

The free tier covers everything above. A Pro tier with additional features like SARIF export and a security dashboard is coming soon.

We'd love your feedback. Try it out and let us know what you think.

https://marketplace.visualstudio.com/items?itemName=BitsPlus.codevigil

https://www.bitsplus.ai/codevigil/

SpekAi - A VSCode extension to validate OpenAPI conforming API implementations

Rasheed — Thu, 04 Sep 2025 18:09:03 +0000

Available for install at https://marketplace.visualstudio.com/items?itemName=BitsPlus.spekai&ssr=false#overview

This is developed with Claude AI and is now open sourced at https://github.com/arasheedu/spekai

Your feedback is greatly appreciated. Thanks!

Model Context Protocol with gRPC and ProtoBuf

Rasheed — Thu, 19 Jun 2025 06:12:39 +0000

Model Context Protocol implemented using gRPC - a working example

Last couple of weekends I sat down to learn about Model Context Protocol. I wanted to get my hands on the keyboard quickly and what better way to do it that than by trying to get MCP working over gRPC using Protobuf.

linkedin.com

My first Blazor app

Rasheed — Tue, 09 Apr 2024 20:35:17 +0000

I hosted my first Blazor app - it was quite a learning experience. Sharing here the URL https://www.bitsplus.ai/ in the hope that I can get some feedback as appropriate.

PDF forms with fake data

Rasheed — Fri, 03 Nov 2023 20:08:22 +0000

Screen capture of a project I am working on to generate PDF forms with fake data for the fields in the form. Can be used for training AI models when such documents normally contains sensitive information. Feedback appreciated!

Talking to containerd GRPC services using .NET

Rasheed — Wed, 02 Aug 2023 20:01:44 +0000

I have been wanting to explore the containerd service APIs on the Windows platform from .NET and almost found the end of internet looking for how to do it.

Thankfully following the below articles I was able to put together a client library which is shared here https://tinyurl.com/mry73kvx

https://tinyurl.com/5n7u93fs

https://tinyurl.com/mr4aumad

The solution generates C# wrappers from protocol buffer specification for the respective containerd service. Hope that someone will find this useful.

How to add bullet points on LinkedIn Experience sections

Rasheed — Tue, 09 Oct 2018 21:27:48 +0000

I have been trying to update my LinkedIn profile ( I am under a job search ) and didn't have a clue how to add bullet points in the experience section of the profile. Appears it takes ALT codes, so in the experience section you should be able to use any of the ALT codes ( I have tested with only a few ).

So press NumLock key to use the numeric keypad, then press and hold the ALT key while entering the numeric key code for the symbol you would like for bullet point using the keys on numpad.

A list of ALT codes can be found at https://www.alt-codes.net/

Philomath is making progress.

Rasheed — Thu, 04 Oct 2018 00:29:23 +0000

arasheedu / philomath

Philomath helps you index websites pointed to by your bookmarks on your machine and then search and locate bookmarks containing specified keywords.

Philomath

Philomath helps you index your bookmarks on your machine such that they can be searched with keywords easily for later reference and recollection. In the fast changing search results on the web how often have you looked for the same web page again and had no luck. With philomath it becomes easier to index and reference the web articles that you care most.

This has been developed on Windows 10 and Docker for Windows is a pre-requisite to run the solution

Running from source

c:\> cd philomath
c:\philomath> docker build -t philomath --file Dockerfile.philomath .
c:\philomath> docker-compose up

c:\> cd philomathclient
c:\philomathclient> npm install
c:\philomathclient> npm start .

The rest is self explanatory ;-)

License

MIT

View on GitHub

I have been at work on this weekend project and has made quite a bit of progress. Posting update looking for some feedback. Creating the installer, updating the README etc. are in progress.

Thanks!

Index/Search web sites pointed to by the bookmarks

Rasheed — Thu, 30 Aug 2018 18:22:38 +0000

I am trying to gauge if there would be enough interest or if you would find it helpful in having the web sites pointed to by one's bookmarks indexed and made searchable for future references. This gets away with the need to arrange them into folders etc.

A cloud based or desktop solution can be achieved for this purpose.

I have got a POC going here - https://bit.ly/2sP9wLt