Rainforest Application Security brings the findings of the Rainforest platform (Quality, SAST, SCA, DAST, Container and IaC analyses) directly into the Eclipse IDE, so developers can identify and fix security issues while they code, early in the development process (shift-left).

Features:

• Sidebar view with vulnerabilities grouped by analysis type (SAST, SCA, IAC, MAST) and real-time search.
• Personal view with the vulnerabilities introduced by your own commits, plus a global Top Vulnerabilities view.
• Shield icons and underlines on affected lines, colored by severity (critical, high, medium, low).
• Hover tooltips with description, fix suggestion and a link to the full details.
• Detailed view with all the technical information about each finding.

Requirements: an active account in the Rainforest system. Generate a Client ID and Client Secret in Rainforest (Settings > API Access Token) and enter them in Window > Preferences > Rainforest Application Security. The extension only works after the credentials are configured. Also requires Eclipse 2023-09 (4.29) or later, Java 21 or later, and a project under Git version control.

Getting started:

1. Restart Eclipse after installing.
2. Enter your credentials in Window > Preferences > Rainforest Application Security (on macOS: Eclipse > Settings). Generate the Client ID and Client Secret in Rainforest under Settings > API Access Token.
3. Open the vulnerabilities view: Window > Show View > Other..., expand Rainforest Application Security and open Rainforest Vulnerabilities. Shortcut: press Ctrl+3 (Cmd+3 on macOS) and type "Rainforest Vulnerabilities".
4. You can drag the view's tab to any side of the window. Eclipse remembers where you put it.
5. Open a file from a Git project analyzed by Rainforest. Affected lines get a shield icon and an underline. Hover a line for details, or click an item in the view to jump to the code.