What is Code Guardian Allow?

Allow automatically vets Visual Studio Code extensions, publishes allowed versions, and monitors them as they change.

Does Allow replace our MDM?

No. Allow works alongside endpoint management tools such as Intune or Jamf and requires no new endpoint agent.

How much does Allow cost?

Allow costs €200 per allowlist, per month, with a 30-day free trial.

Visual Studio Code

Add, vet, monitor, and deploy Visual Studio Code extensions.

Extension identifiers

Allow currently supports Visual Studio Code extensions. Their stable identifier has the form publisher.extension, for example ms-python.python.

Owners and administrators can search the Marketplace from Add extension or enter the exact identifier. Confirm the identifier and publisher; display names alone are not unique.

Add extensions

The standard add action handles one extension. Administrator tools also support scanning a publisher or organization and importing a CSV or JSON list. CSV input contains one publisher.extension identifier per line. JSON input uses a Visual Studio Code allowlist object.

Every added extension enters the existing automated vetting queue. It is not published until it reaches Allowed.

Versions

Published feeds can pin an extension to the vetted version. When the Marketplace publishes a new version, Allow vets it separately while retaining the currently allowed version. Only a new Allowed result advances that pin.