4 ms·
Ask HN: What's your point of view on code review services such as Codacy?
- smt88 9y agoN/A. All of my code handles private data (don't most revenue-generating programs?) and I can't/won't send my code to a third-party server.
- symbolepro 9y agoWhat about on premise version of these services?
- smt88 9y agoWe'd have to monitor outgoing data at the time the code was being analyzed. Even then, we'd probably need the code-review program to be open-source or audited by a third party. Keeping code secret is somewhat useful for security and vital for maintaining some trade secrets.
- jaimefjorge 9y agoHi there. I'm the CEO and Co-founder of Codacy. Thanks for asking this question. Our on premise product is designed for companies that require discretion and a higher security scrutiny. We take security and data protection very seriously in our on premise product. We don't have any access to the product or machines running Codacy. We're very open to feedback and improvements and this is why we constantly are improving our policies and deployment processes. We have some of the largest and most security focused corporations using Codacy Enterprise. Happy to answer more questions!
- PaulHoule 9y agoIn most cases private data can be separated from code so you can stack up the application with an empty database or supply a test database which is sanitized.
- smt88 9y agoIt's not an issue ofndata itself being transferred. It's that our clients don't allow us to send our code to third parties that haven't been audited by the clients. Essentially, our source code must be secret.