Microsoft's security linter with VS and VS Code extensions plus a CLI that flags risky code inline and guides fixes as you type.