Skip to main content

​
Enver for VS Code

The Enver VS Code Extension brings Enver’s zero-knowledge secrets management directly into your development workflow, with the added benefit of real-time security scanning.

​
Features

  • 🔐 Direct CLI Parity: Execute login, init, push, and pull operations right from the Command Palette (Cmd+Shift+P).
  • 🛡️ Leakage Shield: Real-time background scanning that detects hardcoded secrets in your codebase before they get committed to Git.
  • ⚡ Shared Configuration: Uses the same ~/.enver/config.json session as the CLI. Log in once, and you are ready in both tools.

​
Installation

​
From VSIX Package

  1. Download the latest .vsix release from the repository or build it locally.
  2. In VS Code, open the Extensions view (Cmd+Shift+X).
  3. Click the ··· (Views and More Actions) menu in the top right.
  4. Select Install from VSIX… and choose your enver-vscode-1.0.0.vsix file.

​
Available Commands

Press Cmd+Shift+P (or Ctrl+Shift+P on Windows/Linux) and search for Enver:

​
Real-Time Leakage Shield

As you write code or open files, Enver automatically inspects text buffers for sensitive tokens and credentials:
  • Enver API keys (env_live_...)
  • AWS Access Keys (AKIA...)
  • Stripe Secret Keys (sk_live_...)
  • GitHub Personal Access Tokens (ghp_...)
  • Slack Tokens (xoxb-..., xoxp-...)
  • Discord Webhook URLs
  • Hardcoded literals assigned to sensitive variable names (e.g., const API_KEY = "...")
Detected leakages are immediately surfaced as warnings in the Problems tab and highlighted inline in your editor.

​
Configuration Settings

You can customize the extension via VS Code settings (Cmd+,):