Immutable Deep Scan reportEvidence is locked to this exact artifact and scan.
About immutable reports
Future scans cannot replace the findings, coverage, ruleset, or artifact hash shown on this URL.
- Scan
062b6e84-4e61-41e7-936d-c693a810c4aa- Artifact
db37b1c97d58…c372c1fb
Analysis Report
IntelliCode
VisualStudioExptTeam.vscodeintellicode@1.3.2Completed analysis for this exact extension version. Use the summary below to decide what your team should do next.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
- Required action
- Record a team decision before approval
Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
This result applies only to the scanned artifact SHA-256, not to future releases or a publisher generally.
Review the grouped evidence and record the accountable team decision before approval.
Required analysis completed for this exact artifact; evidence remains scoped to scanner coverage.
- 1Artifact boundExtension, version, hash, and scan identity fixed
- 2Analysis checkedExecutable-file coverage
- 3Evidence grouped2 actionable · 10 contextual
- 4Policy appliedExact-release ruleset evaluated
- 5Review neededCurrent decision for this artifact
74/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
Policy result for this exact artifact
100
7/7 required analyzers completed
0
Diagnostic index, not probability
10 contextual notes kept separate
Power describes access, not intent
2 behavior groups need context before approval.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
db37b1c97d58283e6382db2f0f1effcf796e87959eef5cacf9746555c372c1fbBuild ebc6ba89193a · ruleset 2026.08.21-obfuscated-bundle.1
Evidence that drives review
semver@5.5.0 has 1 OSV finding(s). Version match: exact.
2 observed locations · review evidence
Native binary dist/Microsoft.VisualStudio.IntelliCode.SQL.dll has no companion checksum or signature file and no documented provenance.
1 observed location · review evidence