News for hackers. Stuff that matters.
Re:Pysa: An open source tool to detect and prevent security ... by sinancepel on Friday August 07, 2020 @02:43PM (#24085151)
For Instagram (millions of LOC), the analysis gives feedback to engineers in about 65 minutes on average - note that this is in the context of a diff run: We compare the results of a run on the base revision to the proposed changes, running the tool once or twice depending on whether we hit the cache. It's hard to say how long it'll take on your repository as it depends on a lot of factors, but hopefully that provides some intuition.
Re:Pysa: An open source tool to detect and prevent security ... by cubes on Friday August 07, 2020 @02:45PM (#24085175)
That's super helpful. I'm currently at Eventbrite, and we're probably in the same order of magnitude.