Skip to content

track IntelliJ/JetBrains plugins in collect_user_extensions (This PR adds support for detecting and tracking installed plugins in IntelliJ IDEA and other JetBrains IDEs (PyCharm, GoLand, WebStorm, etc.) as part of the dev machine extension scan.)#40

Closed
devanshu-oss wants to merge 2 commits intostep-security:mainfrom
devanshu-oss:feat/track-intellij-extensions

Conversation

@devanshu-oss
Copy link
Copy Markdown

Summary

This PR adds support for detecting and tracking installed plugins in IntelliJ IDEA and other JetBrains IDEs (PyCharm, GoLand, WebStorm, etc.) as part of the dev machine extension scan.

Changes

In collect_user_extensions(), added a new detection block that:

  • Scans ~/Library/Application Support/JetBrains/*/plugins/ — the standard macOS location where all JetBrains IDEs store their plugins
  • Handles multiple installed JetBrains products and versions automatically (e.g. IntelliJIdea2024.1, PyCharm2023.3, etc.)
  • Reports each plugin using the existing extension JSON schema with ide_type: "intellij", consistent with how VSCode and Cursor extensions are reported

Motivation

IntelliJ IDEA is one of the most widely used IDEs among Java/Kotlin/backend developers. Tracking its plugins alongside VSCode and Cursor extensions gives a more complete picture of the tools installed on a developer's machine.

Testing

Tested on macOS with IntelliJ IDEA installed. Plugins are correctly detected and reported in both --pretty an

@devanshu-oss
Copy link
Copy Markdown
Author

Hi team! I've added IntelliJ/JetBrains plugin tracking to complement the existing VSCode and Cursor extension detection. Would love to get a review when you get a chance. Thanks!"

@swarit-stepsecurity
Copy link
Copy Markdown
Member

Hey @devanshu-oss, we have moved on to a new Go based binary out of a single shell script so we will be closing this PR. Thanks for taking time to contribute.

cc: @ashishkurmi

@ashishkurmi
Copy link
Copy Markdown
Member

Thanks @devanshu-oss for your contribution! Closing the PR as per @swarit-stepsecurity's comment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants