Ok, but as developer, does really matter that Mythos apocalyptic alarm? Is there an intelligent SAST? Yes, the intelligent SAST version you are looking for exists and is native to the Semgrep ecosystem. It is called Semgrep Assistant, which runs on top of the Semgrep AppSec Platform. Recently, Semgrep also introduced Semgrep Workflows, allowing you […]
Tag: security
How to monitor cloud costs with kosty: an AWS FinOps utility
Some month ago I found this interesting project on github: https://github.com/kosty-cloud/kosty Kosty is a cost and security audit written in python and using aws cli to check the current status of your service. I followed the quickstart guide: pip3 install kosty python3 -m venv costy export AWS_DEFAULT_PROFILE=root kosty audit –output all Unfortunately this just output […]
Sicurezza, password salvate e Google
youhavebeenpawned! ( https://haveibeenpwned.com/ ) Google fortunatamente non sta a guardare, ma non può agire per noi. Fare click sull’avatar (in alto a destra) per gestire l’account Dove si atterra: Notare un segnale di allarme per problemi di sicurezza (esclamativo rosso): Vai a controllo password Password salvate compromesse Cambia ogni password compromessa Signin per ogni account […]