Semgrep has a Visual Studio Code extension to scan your code as you write it, and to help you write patterns. You can install it from the Extension Marketplace !