Install

Install `vulnetix.vulnetix` from Open VSX or a downloaded VSIX, choose the stable or pre-release line, and verify the file you installed.

The extension identifier is vulnetix.vulnetix. It is published to Open VSX only.

VS Code

Download the VSIX from Open VSX and install it:

curl -fL -o vulnetix.vsix \
  https://open-vsx.org/api/vulnetix/vulnetix/latest/file/vulnetix.vulnetix-latest.vsix
code --install-extension vulnetix.vsix

Or, in the editor, open the Command Palette and run Extensions: Install from VSIX, then pick the file.

Cursor, Windsurf, VSCodium and other forks

Forks use Open VSX as their registry, so the Extensions view finds Vulnetix by name. From a terminal:

cursor      --install-extension vulnetix.vulnetix
windsurf    --install-extension vulnetix.vulnetix
codium      --install-extension vulnetix.vulnetix
code-server --install-extension vulnetix.vulnetix

Per-editor notes are in Supported editors.

Stable and pre-release

The version’s minor number picks the channel, because the Visual Studio Marketplace rejects semver pre-release suffixes.

Minor	Channel	Published versions
Even (`0.2.x`)	Stable	`0.2.0`
Odd (`0.3.x`)	Pre-release	`0.3.0`

Open VSX’s latest alias currently resolves to 0.3.0, the pre-release, because it is the newest upload. To install a specific version:

curl -fL -o vulnetix-0.2.0.vsix \
  https://open-vsx.org/api/vulnetix/vulnetix/0.2.0/file/vulnetix.vulnetix-0.2.0.vsix
code --install-extension vulnetix-0.2.0.vsix

Pinning the extension does not pin the CLI it downloads; see The CLI binary for that.

Verify the download

The release workflow builds one VSIX, publishes it to Open VSX and attaches the same file, with a .sha256 beside it, to the GitHub release v<version> in Vulnetix/vulnetix-vscode. Compare digests:

sha256sum vulnetix.vsix

After installing

Open a folder. The extension offers to download the CLI on first use; First run walks through it. Updating the extension is handled by your editor like any other extension.