EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 6·5 min read
Ship Safe, an open source security scanner for coding agents
TL;DR
Ship Safe is an open-source AI security scanner designed for software teams, identifying vulnerabilities in code, AI agents, and configurations before deployment. It operates locally without requiring signups or API keys, ensuring privacy and security during scans.
✦ Why It Matters
Start using Ship Safe today to enhance your code security and prevent vulnerabilities before deployment.
Key Takeaways
- Run npx ship-safe to scan your repository for vulnerabilities.
- Use interactive mode to fix issues directly within the tool.
- Integrate Ship Safe into your CI/CD pipeline to catch risks early.
- Contribute to the open-source project by adding new security agents.
How It Works
Ship Safe scans the local repository for vulnerabilities by analyzing application code, configurations, and dependencies. It employs various agents to detect specific issues, such as SQL injection or API key leaks, and provides actionable remediation plans.
The tool can operate entirely offline for core checks, ensuring privacy and security during the scanning process.