11 ms·
Heh, cute. This means Github could probably do some automated means of informing these people that their code is insecure and would be a danger to themselves an
by thiderman 13y ago
Heh, cute. This means Github could probably do some automated means of informing these people that their code is insecure and would be a danger to themselves and their users. I'm not sure if they should, but it's interesting that they could.
- jonny_eh 13y agoThere's definitely an opportunity for a service to help developers spot obvious security holes. https://codeclimate.com/ https://codeclimate.com/ is one I've used but it's Ruby only AFAIK.
- dsl 13y agoLots of these exist. Check out whitehatsec.com and veracode.com
- Navarr 13y agoI'm pretty sure anyone can write a github bot. I remember there used to be several (some of which would submit pull requests!)
- yahelc 13y agoThe same bot could notify those people via email using the email address found in commits.
- jaytaylor 13y agoGitHub has not been friendly to bots in the past[1]. [1] https://news.ycombinator.com/item?id=4982240 https://news.ycombinator.com/item?id=4982240 "GitHub Says ‘No Thanks’ to Bots — Even if They’re Nice"