4 ms·
Thanks for commenting, and totally get your perspective on it. Scanning today can be done locally with many tools like Semgrep before you use Corgea. We do sen
by asadeddin 3y ago
Thanks for commenting, and totally get your perspective on it.
Scanning today can be done locally with many tools like Semgrep before you use Corgea. We do send over vulnerability information over to Corgea to make sure we can issue fixes for them reliably and at-scale. Keep in mind repos have vulnerabilities in the thousands or even tens of thousands. So it's not as simple as copilot running on your IDE reading your current likes of code. We have to be able to do this at-scale.
Finally, we've put a lot of effort into securing things down and you can read some of those details here: https://docs.corgea.app/security https://docs.corgea.app/security
- deleted 3y ago[deleted]