CodeRabbit helps teams review, understand, govern, and trust agent-generated code: https://xitter.twitterapi.xyz/t.co/GxSOapi2As!
San Francisco, CA
Joined April 2023
- Tweets6.9K
- Following108
- Followers48.8K
- Likes13.9K
Pinned Tweet
New in CodeRabbit Secure:
Deep Scan now follows a vulnerability across your linked repos, then replays the exploit in a throwaway sandbox to prove it's real before it flags anything.
Hendrik walks through this and everything else in the new update:
Risk-based auto-approvals are live.
ππππππ π:
ππππ_πππππππππ:
πππππππ: ππππ
πππ‘_πππππ_ππππ: πππ
πππππππππ:
- πππππ: ["πππ/ππππ/**"]
πππππππ: πππππ
Cap the risk CodeRabbit can approve, and turn it off for sensitive paths or teams.
2
8
1,076
Your gateway checks the token.
Your orders service trusts whatever user ID it gets handed, and whether that's a hole depends on network config sitting in a third repo.
CodeRabbit Secure now reads linked repos to find out.
CodeRabbit Secure ran 13,000+ deep scans over the last 10 days and turned up 43,000+ high or critical vulnerabilities.
Nearly 10,000 of those are already fixed, which is the bit that matters.
Run your deep scan today, and fix hidden vulnerabilities in your code base!
We put GPT-6 Cyber inside CodeRabbitβs security scan pipeline.
22 of 33 known vulnerabilities caught vs 19 for our production ensemble, and 66% more high and medium severity findings.
Full eval below.
Introducing GPTβ6 Cyber: a major advance in security research that pairs stronger capabilities with better model alignment.
The model powered the Linux kernel research we announced yesterday, and security teams at companies like Mozilla, Palo Alto Networks, Calif, and Ciscoβalongside our own at OpenAIβare already putting it to work.
GPT-6 Cyber is available to select Daybreak Red customers and we are expanding access over time.
openai.com/index/introducingβ¦
"Just because you can, doesn't mean you should."
AI makes it easier to ship more, but Hassan El Mghari makes the case for shipping less: focus on one thing, make it work well, and resist adding features just because you can.
Watch our 29 minute conversation on Rabbits on the Run here!
Featuring @nutlope @JuanPa and a guest appearance by @theo!
Building your AWS re:Invent schedule?
Come by CodeRabbit at booth #528 for a live demo and a conversation about your teamβs code.
π Nov 30 β Dec 4
π Las Vegas
coderabbit.ai/events/aws-reiβ¦
A 403 doesnβt mean the bug is fixed, it might mean your request never reached the code you were testing.
Runtime Verification in CodeRabbit Secure shows whether the request actually hit the target, right next to the verdict.
How we built it π
We committed $1M in tokens over 2 weeks to help any customer secure their codebase for free, but due to overwhelming demand funds are going to be used up in the next few days.
In this past week:
> CodeRabbit ran ~10k free scans
> We identified 35,000 critical vulnerabilities
> Thousands of organizations secured their apps from attackers
Run a free deep scan today - this is the last window to get it free:
coderabbit.ai/security/free-β¦
Wake up
Attackers use AI to find vulnerabilities faster. Your defense should too.
CodeRabbit Secure.
Find, verify and fix vulnerabilities in existing code and every new PR.
It's everybody's job now.
Here are 6 demos of CodeRabbit Secureβs core features.
Starting with the one weβre most excited about, Deep Scan.
We believe every dev, team and OSS project should be running it.
CodeRabbit is joining the OpenAI Daybreak Defense Network.
CodeRabbit Secure now runs on GPT-6.1 Sol and OpenAI's GPT Cyber models. Early users have already found and fixed broken access controls and authentication failures with it.
Deep Scan is free until Nov 8, run it on your repo and see what it turns up.
@OpenAIDevs
coderabbit.ai/blog/one-milliβ¦
Over the last 30 days, CodeRabbit Secure found 8,000+ high or critical security vulnerabilities across 600 organizations.
Broken access control, SQL injection, and authentication failures were the dominant issues accounting for over 70% of vulnerabilities.
Find and fix your vulnerabilities with CodeRabbit, for free, until November 8th.
coderabbit.ai/security/free-β¦