News for hackers. Stuff that matters.

A comment on Raven – CI/CD Security Analyzer.

Re:Raven – CI/CD Security Analyzer by boredumb on Tuesday October 31, 2023 @05:43PM (#38091811)
Does this only work with github actions?
[ Parent | on HN ]
Re:Raven – CI/CD Security Analyzer by mdaniel on Tuesday October 31, 2023 @06:17PM (#38092189)
Seems so, and also only .com not even GHE https://github.com/CycodeLabs/raven/blob/v1.0.3/src/download...

I have no earthly idea why a security tool would roll their own GitHub access library in python :-/

[ Parent | on HN ]
Re:Raven – CI/CD Security Analyzer by diarrhea on Tuesday October 31, 2023 @08:08PM (#38093035)
There is no official GitHub SDK for Python. It's easy enough to do it anyway. This is not authentication logic either.
[ Parent | on HN ]
Re:Raven – CI/CD Security Analyzer by chriswitts on Wednesday November 01, 2023 @03:52AM (#38095618)
PyGithub has existed for ages, even if it is not official. GitHub only maintains octokit for JS, Ruby, .NET, and Terraform.
[ Parent | on HN ]