<p class="wp-block-paragraph">Ok, but as developer, does really matter that Mythos apocalyptic alarm? Is there an intelligent SAST?</p> <p class="wp-block-paragraph">Yes, the intelligent SAST version you are looking for exists and is native to the Semgrep ecosystem. It is called <strong>Semgrep Assistant</strong>, which runs on top of the <a href="https://semgrep.dev/docs/deployment/add-semgrep-to-ci">Semgrep AppSec Platform</a>. Recently, Semgrep also introduced <strong>Semgrep […]
Tag: security
How to monitor cloud costs with kosty: an AWS FinOps utility
<p class="wp-block-paragraph">Some month ago I found this interesting project on github: <a href="https://github.com/kosty-cloud/kosty" target="_blank" rel="noopener" title="">https://github.com/kosty-cloud/kosty</a></p> <p class="wp-block-paragraph">Kosty is a cost and security audit written in python and using aws cli to check the current status of your service.</p> <p class="wp-block-paragraph">I followed the quickstart guide:</p> <blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> <p class="wp-block-paragraph">pip3 install kosty</p> <p class="wp-block-paragraph">python3 […]
Sicurezza, password salvate e Google
<p class="wp-block-paragraph">youhavebeenpawned! ( https://haveibeenpwned.com/ )</p> <p class="wp-block-paragraph">Google fortunatamente non sta a guardare, ma non può agire per noi.</p> <ul class="wp-block-list"> <li>Fare click sull’avatar (in alto a destra) per gestire l’account</li> </ul> <ul class="wp-block-list"> <li>Dove si atterra: </li> </ul> <ul class="wp-block-list"> <li>Notare un segnale di allarme per problemi di sicurezza (esclamativo rosso):</li> </ul> <ul class="wp-block-list"> <li>Vai […]