Skip to content

Add hwa extension#5277

Open
yuricommits wants to merge 3 commits intozed-industries:mainfrom
yuricommits:main
Open

Add hwa extension#5277
yuricommits wants to merge 3 commits intozed-industries:mainfrom
yuricommits:main

Conversation

@yuricommits
Copy link

HWA

Detects hardcoded secrets, weak cryptography, injection vulnerabilities, and more in AI-generated code.

What it detects

  • Hardcoded secrets (passwords, API keys, AWS keys, JWTs, GitHub tokens)
  • Cryptographic issues (MD5, SHA1)
  • SQL injection
  • Command injection
  • Unsafe deserialization (pickle, yaml.load)
  • SSL verification disabled
  • Weak randomness (Math.random, random.random)
  • eval/exec usage
  • Flask debug mode
  • Rust: unsafe blocks, unwrap/expect panics, weak RNG

Languages

TypeScript · JavaScript · Python · Go · Rust

How it works

The extension downloads a pre-built Rust LSP server binary from GitHub releases. No runtime dependencies required.

Repository

https://github.com/yuricommits/hwa

@cla-bot cla-bot bot added the cla-signed label Mar 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant