kirumachi

5 ms·

1. 1.▲
   by kirumachi 5mo ago

   Does auto-generated fixes help or would you not trust them?
2. 2.▲
   Ask HN: When you get a SAST finding, what's harder

   2 points by kirumachi 5mo ago|1 comments
3. 3.▲
   Show HN: Secure SDLC Agents for Claude and Cursor (MCP)(github.com)

   1 points by kirumachi 6mo ago|0 comments
4. 4.▲
   by kirumachi 8mo ago

   Great question. Right now (v2.0.1), The TUI is optimized for metadata triage. You see the Rule ID, Severity, the full Semgrep message (which often contains the taint trace), and the File/Line location. The Workflow: 1. I see [High] SQL
5. 5.▲
   by kirumachi 8mo ago

   It’s open source (Apache 2.0) and Written in Python/Textual.
6. 6.▲
   Show HN: Kekkai – Interactive security triage in the terminal

   6 points by kirumachi 8mo ago|3 comments
7. 7.▲
   by kirumachi 9mo ago

   Hi HN, I’m one of the creators of Hokage. We built this because we were tired of the usuall spreadsheet hell that comes with running open-source security tools at any reasonable scale. If you are a small-to-mid-sized team, you likely use to
8. 8.▲
   Show HN: Hokage – Unified Orchestration for Semgrep, Trivy, and Zap(github.com)

   2 points by kirumachi 9mo ago|1 comments
9. 9.▲
   Show HN: An open-source starter kit for implementing OWASP ASVS 5.0(github.com)

   1 points by kirumachi 11mo ago|0 comments