Bearer Code Security Scanner Add Support for Java, PHP, Go, and Python
Hello there, I’m Guillaume, the cofounder and CEO of Bearer, a code security startup trying to rethink security products for a developer-first World. 7 months ago we introduced on HN, Bearer CLI (https://github.com/Bearer/bearer), our free and open code security scanner supporting at the time only Ruby and JavaScript applications. We’ve been working very hard with the team, thanks to community feedback to bring tons of new features as well as more language support to become everyone’s go-to code security solution. Just to name a few major features: - Native integration…
What it does
In the maker’s words, at launch
Hello there, I’m Guillaume, the cofounder and CEO of Bearer, a code security startup trying to rethink security products for a developer-first World. 7 months ago we introduced on HN, Bearer CLI (https://github.com/Bearer/bearer), our free and open code security scanner supporting at the time only Ruby and JavaScript applications. We’ve been working very hard with the team, thanks to community feedback to bring tons of new features as well as more language support to become everyone’s go-to code security solution. Just to name a few major features: - Native integration with GitHub and GitLab - Diff scanning feature - PR/MR annotation - Fingerprinting of findings with "ignore" management Plus the release of TypeScript, Java, and PHP support, plus an early alpha release for both Go and Python. More on our language coverage here: https://docs.bearer.com/reference/supported-languages/. Everything mentioned here is still completely free to use! In addition to Bearer CLI, we’ve also released a SaaS companion dashboard, Bearer Cloud, mostly intended for AppSec team, that provides a nice UI and workflow features to better act on security findings (more here: https://www.bearer.com/bearer-cloud) Our Philosophy remains the same as day 1, to provide a solution that just works out-of-the-box for everyone, with a great DX, a good level of risks and security coverage (OWASP TOP 10, CWE Top 25), and the ability to customize everything if needs be. We would love for you to give it a try (30 seconds install, 2 minutes scan), and tell us everything we could improve! Thank you
Does the same job
all alternatives →
- TSTypeScript Security Scanner2023 · ▲9
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
- FOFosite – OAuth2 framework for Go2016 · github.com · ▲38
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, October 2023
the whole month →
Nudge 2.0▲1,051In-app experiences to activate, retain, & understand users
Growth · 2023 · nudgenow.com
Unlock AI magic for elevated customer engagement, fast
AI · 2023 · tiledesk.com
- OD
Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.
Dev tools · 2023 · github.com