cybersecurity

4799 readers

59 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 2 years ago

MODERATORS

shellsharks

tweedge

Semgrep & Jupyter (Do you use either?) (research.nccgroup.com)

submitted 2 years ago by shellsharks to c/cybersecurity

3 comments fedilink hide all child comments

Now here's two tools I wish I was more experienced with - Semgrep and Jupyter. Beyond this cool article from NCC, I'm interested to hear from anyone who uses either one of these tools. How did you get started, what do you do with them, etc...

you are viewing a single comment's thread
view the rest of the comments

[–] shellsharks 1 points 2 years ago (1 children)

What do you like about CodeQL? Haven't used that yet either.

[–] himazawa 2 points 2 years ago

Report quality (less FP) compared to semgrep, snyk and sonarcloud but a killer feature for me is that you get the call paths so you can see when and how a vulnerable dependency is called. Pretty useful on big codebases.