From 23aaaa6e6c57035cf1f8de6185c10df3c2b8ac7e Mon Sep 17 00:00:00 2001 From: Kjell Tore Guttormsen Date: Sat, 18 Apr 2026 11:09:02 +0200 Subject: [PATCH] feat(llm-security): honor LLM_SECURITY_IDE_ROOTS for JetBrains discovery MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Symmetric with the existing VS Code branch — the env var was only wired into getVSCodeExtensionRoots(), so the plan's master verification (`LLM_SECURITY_IDE_ROOTS=... --intellij-only`) reported 0 discovered plugins. Adding the same fallback to discoverJetBrainsExtensions makes both families honor the CLI override and closes the gap. --- plugins/llm-security/scanners/lib/ide-extension-discovery.mjs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/plugins/llm-security/scanners/lib/ide-extension-discovery.mjs b/plugins/llm-security/scanners/lib/ide-extension-discovery.mjs index 1577bcd..0477e97 100644 --- a/plugins/llm-security/scanners/lib/ide-extension-discovery.mjs +++ b/plugins/llm-security/scanners/lib/ide-extension-discovery.mjs @@ -305,6 +305,8 @@ export async function discoverJetBrainsExtensions(options = {}) { let baseDirs; if (Array.isArray(options.rootsOverride) && options.rootsOverride.length > 0) { baseDirs = options.rootsOverride; + } else if (process.env.LLM_SECURITY_IDE_ROOTS) { + baseDirs = process.env.LLM_SECURITY_IDE_ROOTS.split(':').filter(Boolean); } else { baseDirs = [getJetBrainsBaseDir(), getAndroidStudioBaseDir()].filter(Boolean); }