rem’s avatarrem’s Twitter Archive—№ 77,521

  1. …in reply to @jcubic
    jcubic Keithamus snyksec Firstly, I know because I wrote the first version of the snyk cli tool. But also, this isn't accurate (or I'm 90% sure). You can write vulnerable code and snyk won't detect it, because it's not building an ast of your code and checking. It only checks *known* vulns on your deps.
    1. …in reply to @rem
      jcubic Keithamus snyksec But, snyksec, since you favourited that tweet, please correct me if I'm wrong. Does it actually check user code for the implementation of vulns?