security
Secrets in argv, and scanners that fail open
A git clone with Authorization on argv is readable from ps, and a scanner that swallows errors is a silent pass. Two fixes from a PR review.
Read the entry →#security
3 entries tagged “security”.
GitProxy
How to write a GitProxy plugin: a diff-scanning example
How to write a GitProxy plugin: a complete diff-scanning example, how to pick the right chain phase, and why a plugin can load and still never run.
Read the entry → github-actions
AI PR review and security scanning with GitHub Actions
Build your own GitHub Actions bot that review pull requests with an LLM: PR Description Checker and Security Scanner.
Read the entry →