GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing codepathfinder.dev — Code Pathfinder | Open Source Cross-File Static Code Analysis Open Source SAST v2.1.0Go support is here: 21 security rules, 6.6x faster scansTrace vulnerabilities across your entire codebaseCross-file dataflow analysis. Type-aware. Open source SAST that cuts through the noise and finds real vulnerabilities. Installation Get started in secondsbrew install shivasurya/tap/pathfindermacOS & Linux • v2.1.0 Supported languages Go Python Docker Docker Compose C (soon) C++ (soon) Why Pathfinder Developers trust findings from Code PathfinderSecureFlow AI Say goodbye to false positivesGet findings you feel confident bringing to developers across SAST, SCA, and Secrets scanning. Filter out the false positives that traditional tools always flag with contextual, AI-powered noise filtering. Read our guide on reducing false positivesSecurity Dashboard Critical 0 -100% High 2 -90% Medium 5 No change Vulnerability Trend (Last 30 days) Jan 1Jan 30 api/views.py 1from django.db import connection 2 3def get_user(user_id): 4cursor = connection.cursor() 5query = f"SELECT * FROM users WHERE id = {user_id}" 6cursor.execute(query) 7return cursor.fetchone() SQL Injection (CWE-89) User input flows to SQL execution without sanitization Code Graph Analysis Eliminate developer frictionAutomatically hide likely false positives from developers. Present findings and fixes to developers in their native workflows with structural search, call graphs, and source-to-sink tracing. Explore security rules and code graph analysisCI/CD Integration Easily operationalize and scaleSee findings in your editor, pull requests, and CI pipelines with a single configuration. Export SARIF and DefectDojo reports with severity mapping for smooth triage and tracking. .github/workflows/security.yml name: Security Scan on: [push, pull_request] jobs: security: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - name: Run Code Pathfinder run: | npm install -g codepathfinder pathfinder ci --project . --ruleset cpf/python Build passing 0 vulnerabilities Performance Performance that doesn't compromise securityLightning-fast scans with AI precision that actually catches vulnerabilities. 98% Fewer false positives with AI filtering 10s Median CI scan time 12+ AI models supported Security Registry Security rules that grow with threatsProtect your code with an ever-growing set of security rules covering OWASP Top 10, CVEs, and framework-specific vulnerabilities. ⌘K Privileged Port ExposedMEDIUMExposing port below 1024 typically requires root privileges to bind. Consider using non-privileged ports (>1024) with port mapping or granting CAP_NET_BIND_SERVICE capability. dockerdockerfileport+8 2026-04-13Docker Dangerous Capability AddedHIGHService adds dangerous capability. These capabilities can be used for container escape or privilege escalation. docker-composecomposecapabilities+6 2026-04-13Docker Compose Flask SQL Injection via Tainted StringCRITICALFinds user input reaching raw SQL queries in Flask apps where parameterized queries should be used instead. pythonflasksql-injection+13 2026-04-13Python Use of SHA1 Weak Hash AlgorithmHIGHDetects use of SHA1 (crypto/sha1) which has a proven collision (SHAttered, 2017) and is deprecated by NIST for all applications through 2030. gosecuritycrypto+6 2026-04-13Go Use WORKDIR Instead of cdLOWUse WORKDIR instruction instead of 'cd' in RUN commands. dockerdockerfileworkdir+6 2026-04-13Docker Seccomp Confinement DisabledHIGHService disables seccomp profile. Container can use all system calls, increasing attack surface. docker-composecomposeseccomp+6 2026-04-13Docker Compose AI Integration Connect your AI assistant to your codebaseQuery your codebase with natural language through Claude Code, Codex, OpenCode, or Windsurf. Get instant answers about function calls, dependencies, and code structure without leaving your editor. Natural Language Queries Ask “What calls this function?” or “Show me all database queries” Deep Call Graph Analysis Trace function calls, dependencies, and data flows across your entire project Multi-Project Support Query across microservices, monorepos, and complex architectures Example Query Ask your AI assistant You ask “What functions call validate_user?” AI responds Found 12 functions that call validate_user: • app.api.login_endpoint • app.api.register_endpoint • app.middleware.auth_middleware • app.cli.login_command ... and 8 more Powered by Model Context Protocol (MCP) Build secure software without drowning in alertsFocus on real vulnerabilities with AI-powered precision that cuts through the noise of traditional security scanners. |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |