Show HN: I built a PR listener and ruleset to detect malicious code in CI/CD https://ift.tt/UwNfgI6

Ads by Eonads

Show HN: I built a PR listener and ruleset to detect malicious code in CI/CD I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://ift.tt/UXw5gAu The ruleset: https://ift.tt/rKYFkP7 The research: https://ift.tt/KoSCWZz... https://ift.tt/UXw5gAu February 26, 2025 at 12:52AM