dx
3 posts · all writing
Shift left became run everything on every commit
What got built was twelve scanners on every push, eleven minutes, and a pipeline people bypass. The useful version is about latency, not location.
Security findings in your editor, from standard SARIF
A finding you have to go looking for is one you fix later. Draugr writes standard SARIF, so a scan opens as inline squiggles in VS Code with no plugin.
Scan any repo for vulnerabilities with zero config
Most tools want config before a result. draugr scan . runs SAST, SCA, secret and IaC checks over a repo with no descriptor, and ranks what it finds.