VS Code Extension

We're excited to announce DeepSource's VS Code Extension, now in private beta. You can now detect, understand, and effortlessly resolve issues directly from VS Code. You can install the plugin here. For installation steps and a quick tutorial, please read the documentation.

Support for monorepos

For teams that use a monorepo workflow for development, managing different quality and security gates for different sub-repos can be challenging, since VCS providers lack first-class support for monorepos. In this release, we've launched first-class support for monorepos. You can convert any repository on DeepSource into a monorepo and map subfolders as sub-repositories. Then, each sub-repository can be used as a first-class repository on DeepSource — complete with its own issue baseline tracking, intelligent PR checks, and quality gates. Read more about it in the docs.

New in Analyzers

We've added 30+ new static analysis and SAST checks:

• C#: CS-R1131, CS-R1132, CS-R1133, and CS-R1134
• Java: JAVA-E1109, JAVA-E1089, JAVA-W1090, JAVA-W1091, JAVA-W1092, JAVA-W1093, JAVA-W1094, JAVA-W1096, JAVA-W1097
• JavaScript: JS-W1042, JS-W1043, JS-W1044
• Scala: SC-R1074, SC-R1075, SC-R1076, SC-R1077, SC-R1078, SC-R1079, SC-R1080, SC-R1081, SC-R1082, SC-W1087, SC-W1088
• Ruby: RB-E1009, RB-S1004, RB-S1005

We've added Autofix™ for 12 checks:

• JavaScript: JS-W1042, JS-W1044
• Java: JAVA-W1086, JAVA-W1016, JAVA-E1097, JAVA-W1031, JAVA-E1063, JAVA-E1032, JAVA-W1038, JAVA-E1042, JAVA-W1091

Fixes and Improvements

• The Swift analyzer is live on Enterprise Server, with 78 checks and 15 Autofixes. Read more about it in the blog.
• The Kotlin analyzer is live on Enterprise Server, with 50 checks. Read more about it in the blog.
• Users can now use Autofix™️ on up to 1000 files at once.
• We've made performance improvements in the PAT authentication in the public API. You should see faster response times when using the API.
• We've updated broken documentation URLs being sent in commit statuses & checks.
• We've fixed an issue in the Jira integration in which only the first 500 projects would be shown in the integration settings.
• In our Secrets analyzer, we've added dedicated issues for tokens for 40 unique APIs. We now show specific remediation steps for these API providers.