HoundDog.ai

HoundDog.ai Static Code Scanner

This extension integrates with the HoundDog.ai Static Code Scanner, a robust and ultra-fast source code analysis tool that helps organizations prevent unintentional developer errors, such as oversharing or overlogging of sensitive data (including Personally Identifiable Information (PII), Protected Health Information (PHI), Cardholder Data (CHD), and Personally Identifiable Financial Information (PIFI)), before the code reaches production.

Features

• Workspace-wide scanning: Scans your entire open workspace to detect vulnerabilities where sensitive data (e.g., PII/PHI) is exposed in plaintext within logs, files, cookies, tokens, and third-party integrations (e.g., Datadog, Sentry, Segment, etc.). Here is a sample of the vulnerability types covered by HoundDog.ai:
  • CWE-201: Information Exposure Through Sent Data
  • CWE-209: Information Exposure Through an Error Message
  • CWE-312: Cleartext Storage of Sensitive Information
  • CWE-313: Cleartext Storage in a File or on Disk
  • CWE-315: Cleartext Storage of Sensitive Information in a Cookie
  • CWE-532: Insertion of Sensitive Information into Log File
  • CWE-539: Use of Persistent Cookies Containing Sensitive Information
• Problem integration: Displays the detected vulnerabilities directly in the "HoundDog" panel, making it easier to track and address issues.
• Remediation strategies: Provides recommendations on how to fix PII leaks, including omitting the exposed data or sanitizing it before exposure (e.g., masking, encryption, obfuscation, etc.).

Requirements

To use this extension, you need the following:

• HoundDog Scanner CLI: Ensure the HoundDog Scanner CLI is installed and accessible in your system's PATH. Please follow these guidelines to install the scanner: https://docs.hounddog.ai/scanner/installation
• API Key: A valid API key must be configured in the extension's settings. If your organization has purchased one of the paid plans, you can log into the HoundDog.ai Cloud Platform to generate the API key needed—see the documentation for more details. Without an API key, you will not be able to use this extension.

Extension Settings

The extension adds the following configurable settings:

• houndDogScanner.apiKey: Set your API Key to enable the scanner.
• houndDogScanner.enableDataElements: Toggle the inventory of sensitive data elements found in your workspace. Enabled by default for comprehensive scans but can be disabled for faster performance.