peaktwilight

7 ms·

1.
by peaktwilight 5mo ago
update: filed #9 to build a labeled corpus and publish per-rule numbers.
2.
by peaktwilight 5mo ago
true, right now it's AST pattern matching with `pattern-inside`/`pattern-not-inside` for syntactic scoping. I changed the description. Intraprocedural dataflow is the next step (tracking in #10) and while trying to keep it close l
3.
by peaktwilight 5mo ago
update: `NoPickle`/`NoYamlLoad` string-match the callee text, so `import pickle as p; p.loads(...)` and `from pickle import loads as d` slip past. Filed as #7 with a fix plan (intraprocedural alias table). Thanks!
4.
by peaktwilight 5mo ago
thx for the tip, I'll measure and see if LoC time is stable accross different codebases. Mind if I cite it in the readme (anonymized)?
5.
by peaktwilight 5mo ago
didn't measure that yet, but definitely thinking of adding it into scope soon
6.
by peaktwilight 5mo ago
cool, will check it out thanks!
7.
by peaktwilight 5mo ago
Appreciate it! cloudformation isn't in scope today but the perf approach (tree-sitter + parallel file walk + rule pre-filtering) transfers, so happy to check it out.
8.
by peaktwilight 5mo ago
quick correction: built-in rules are compiled in, but foxguard also loads Semgrep-compatible YAML rules at runtime via --rules <path> (or .foxguard.yml). You can add or modify rules without touching the binary. The rust-coded rules ar
9.
by peaktwilight 5mo ago
I work as a cyber defense engineer in the SOC of one of the largest companies in my country. We've tried many SOAR platforms over the years and we've never figured out a good solution to simplify the lives of our less technical an
10.
The AI coding agent is a new kind of contributor, and Git isn't made for it(agent-undo.com)
3 points by peaktwilight 5mo ago|0 comments
11.
A security scanner as fast as a linter – written in Rust(github.com)
53 points by peaktwilight 5mo ago|20 comments
12.
by peaktwilight 6mo ago
Hey HN, I built foxguard because most security scanners use bloated python to use locally. Semgrep takes 10-30s on a medium repo. foxguard finishes in under a second on the same codebase (61x faster on the express codebase for example). It&
13.
Foxguard – a security scanner as fast as a linter(github.com)
1 points by peaktwilight 6mo ago|2 comments
14.
Opus 4.6 vs. GPT 5.4 – an opinionated take for my diary(doruk.ch)
2 points by peaktwilight 6mo ago|0 comments