Show HN:Vibe编码的GitHub PR机器人,用于集成GitHub Action
Show HN: Vibe Coded GitHub PR Bot for Integrating a GitHub Action

原始链接: https://vetpkg.dev/gha

使用“vet” GitHub Actions PR 机器人保护您的开源供应链安全!此工具将 vet 无缝集成到您的工作流程中,自动扫描拉取请求中的开源组件。 在进行简单的 GitHub 身份验证以确保合法访问后,机器人会创建一个拉取请求来设置集成。然后,vet 只扫描 PR 中更改的文件,使用自定义策略识别常见的开源风险和潜在的恶意代码。 它提供安全防护措施,尽早发现问题,并将所有结果直接集成到您的 GitHub 工作流程中。如果发现任何策略违规,则会阻止拉取请求,防止合并有风险的代码。 vet 机器人由 SafeDep 团队使用 SafeDep Cloud API 构建,提供自动化扫描、策略驱动检查和恶意意图检测,所有这些都旨在增强项目的安全性。

Hacker News 最新 | 过去 | 评论 | 提问 | 展示 | 招聘 | 提交 登录 指南 | 常见问题 | 列表 | API | 安全 | 法律 | 申请 YC | 联系我们 搜索:

原文

🤖 vet GitHub Actions PR Bot

Automatically integrate vet into your GitHub Actions workflow to secure your open source supply chain with a single pull request.

Start Integration

GitHub Repository URL

GitHub Authentication Required

You'll need to authenticate with GitHub to verify your access to the repository. We ensure only a repository contributor can initiate the integration to avoid spam.

After integration, you will get:

  • Automated OSS component scanning in your workflow
  • Custom policy to check for common OSS risks
  • Protect against malicious code and other risks
  • Security guardrails to catch issues early

All results are integrated directly in your GitHub workflow.

Like what you see? ⭐️ us on GitHub!

How it works

Vet Action Demo
Click to enlarge

vet-action integrates vet into your GitHub workflow

  • Scan only changes files in the pull request
  • Enables policy driven guardrails against risky OSS components
  • Blocks the pull request if policy violations are found
  • Scans code for malicious intent

Built with by SafeDep Team using SafeDep Cloud API ⚡️ About

    联系我们 contact @ memedata.com