Eclipse Theia

The extensible IDE platform behind many custom tools. Open VSX is native here.

Eclipse Theia is an IDE framework that implements the VS Code extension API. It runs as a desktop application or as a served web IDE, and in both cases the extension host is a Node process with filesystem access, so scanning works.

Theia and Open VSX come from the same place: the Eclipse Foundation created Open VSX precisely so that non-Microsoft editors would have a marketplace they were permitted to use. Vulnetix publishing there is what makes this work.

Install

Extensions view, search Vulnetix. Or place the .vsix in the deployment’s plugins directory:

curl -L -o plugins/vulnetix.vsix \
  https://open-vsx.org/api/vulnetix/vulnetix/latest/file/vulnetix.vulnetix-latest.vsix

Then start Theia with --plugins=local-dir:./plugins.

Theia-based products

Many tools are Theia underneath, sometimes without saying so prominently. If yours implements the VS Code extension API at version 1.96 or later and can load a .vsix, Vulnetix will work. Two things to check:

• API coverage. Theia implements most but not all of the VS Code API, and coverage varies by version. Vulnetix uses a deliberately conservative surface: diagnostics, tree views, webviews, secret storage, tasks and a language client. If something is unavailable in your build the extension degrades rather than failing to activate, and says so in its output channel.
• Secret storage. Theia’s implementation of secret storage varies by deployment. Where it is unavailable, use VULNETIX_API_TOKEN in the environment instead of interactive sign-in.

Building Theia with it preinstalled

{
  "theiaPluginsDir": "plugins",
  "theiaPlugins": {
    "vulnetix.vulnetix": "https://open-vsx.org/api/vulnetix/vulnetix/latest/file/vulnetix.vulnetix-latest.vsix"
  }
}