Viewing profile — micksmix
micksmix
HN member- Joined
- Mon, Feb 24, 2025, 9:41 PM UTC
- HN karma
- 4
- Public activity
- 9 items
- HN profile
- View on Hacker News ↗
About micksmix
Recent public activity
-
comment
Comment #48130523
This is also a good reminder to scan CI logs, not just source code. Shameless plug: I work on Kingfisher, an Apache 2.0 OSS secret scanner and validator written in Rust, that can a…
-
comment
Comment #47162572
[dead]
-
story
Show HN: Kingfisher, a fast OSS secret scanner with validation and blast radius
I built Kingfisher, an extremely fast Apache 2.0 OSS secret scanner (Rust) that goes beyond simply finding secrets. - Live validation: checks whether a candidate secret actually wo…
-
comment
Comment #45662710
I'm curious how Kingfisher would do against the proprietary dataset: https://github.com/mongodb/kingfisher Any chance you could try and share results? Full disclosure, I built King…
-
comment
Comment #45165323
Loved this “lead bullets” framing, especially the parts on taint checking, scanners, and pre-processing/sampling logs. One practical add-on to the "Sensitive data scanners" section…
-
comment
Comment #43215922
That makes a lot of sense. I wish you the best of luck and will be happy to try it out as you continue to develop it!
-
comment
Comment #43214408
One of the main benefits of Semgrep is its unified DSL that works across all supported languages. In contrast, using the Go module "smacker/go-tree-sitter" can expose you to differ…
-
comment
Comment #43214171
This is a really interesting project! I'd love to hear how this project differs from Bearer, which is also written in Go and based on tree-sitter? https://github.com/Bearer/bearer …
-
comment
Comment #43165301
[dead]