Skip to main content

Conviso Platform for JetBrains IDEs

Objective​

Use Conviso Platform in a supported JetBrains IDE to review security data, analyze code with AI assistance, and run local repository scans without leaving the IDE.

Prerequisites​

  • A supported JetBrains IDE version (see Supported IDEs)
  • A Conviso Platform account with access to the required company
  • A Conviso Platform API token
  • An open project
  • Docker installed and running to use local SAST, SCA, or AST scans

AI features depend on the capabilities enabled for your Conviso Platform account.

Supported IDEs​

The Conviso Platform plugin supports the following JetBrains IDEs and minimum versions:

IDEMinimum version
Android StudioLadybug | 2024.2.1
CLion2024.2
Code With Me Guest1.0
DataGrip2024.2
DataSpell2024.2
GoLand2024.2
IntelliJ IDEA2024.2
IntelliJ IDEA Community2024.2
JetBrains Client1.0
JetBrains Gateway2024.2
MPS2024.3
PhpStorm2024.2
PyCharm2024.2
PyCharm Community2024.2
Rider2024.2
RubyMine2024.2
RustRover2024.2
WebStorm2024.2

Install the Plugin​

  1. Open Settings > Plugins.
  2. Select Marketplace.
  3. Search for Conviso Platform.
  4. Click Install.
  5. Restart the IDE if prompted.

img

Configure Access​

  1. Open Settings > Conviso Platform.
  2. Enter your API Token.
  3. Select a company from the Company ID list.
  4. Click Test API.
  5. Click Apply.
  6. Open Tools > Conviso Platform > Open Conviso Platform.

The API token is stored in the JetBrains Password Safe. Use Check AI Access in the settings page to confirm whether AI capabilities are available for the selected company.

Use Conviso Platform​

img

The Conviso Platform tool window provides:

  • Chat — ask security questions, attach a code selection or files, search for similar issues, analyze selected code, and review suggested fixes.
  • Vulnerabilities — filter findings by asset or title, inspect details, generate an AI-assisted fix, and update status.
  • Repository Vulnerabilities — review findings from the latest local repository scan.
  • Requirements — browse projects, requirements, and activities; update statuses and add evidence to an activity.
  • Pipeline Breaks — review failed security gate executions and their failure reasons.

Double-click an item in a list to open its detailed information.

Analyze Selected Code​

  1. Select the relevant code in the editor.
  2. Open Tools > Conviso Platform.
  3. Select Analyze Security and Suggest Fix.
  4. Review the response in the Chat tab.
  5. Click Apply Suggested Fix only after reviewing the proposed code.
  6. Confirm the replacement.

Run a Local Repository Scan​

  1. Confirm Docker is running.
  2. Open the repository as a project in your JetBrains IDE.
  3. Open Tools > Conviso Platform.
  4. Select Run Repository SAST, Run Repository SCA, or Run Repository AST.
  5. Open the Repository Vulnerabilities tab to review the detected issues.

Local scans run as dry runs and do not upload a new scan result to Conviso Platform.

Validation​

  • Test API succeeds and the company list contains the expected company.
  • The tabs load data for the selected company.
  • A local scan populates Repository Vulnerabilities.

Troubleshooting​

Platform Data Does Not Load​

Open Settings > Conviso Platform, confirm the API token and company, and run Test API again.

Contribute to the Docs

Found something outdated or missing? Help us improve the documentation with a quick suggestion or edit.

How to contribute

Resources

By exploring our content, you'll find resources that will enhance your understanding of the importance of a Security Application Program.

Conviso Blog: Explore our blog, which offers a collection of articles and posts covering a wide range of AppSec topics. The content on the blog is primarily in English.

Conviso's YouTube Channel: Access a wealth of informative videos covering various topics related to AppSec. Please note that the content is primarily in Portuguese.