Viewing profile — mgiladi

They have no way of knowing unless they have admin access, in which case they can do whatever they want anyway. If the tool produces any visible outputs, just configure it to block…

We've recently released open-source tools that would have easily prevented this, before anything runs or added to any pipeline: 1. The maintainers could have used PRevent to immedi…

We've recently released open-source tools that would have easily prevented this: 1. The maintainers could have used PRevent to immediately alert and block any PR containing malicio…

I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting…

Hey HN, I built a GitHub app that detects malicious code in pull requests and notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I sta…