Open Source

31044 readers

1014 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

[email protected]

Any AI tool to analyse a git repo for malicious code? (discuss.tchncs.de)

submitted 2 months ago by [email protected] to c/[email protected]

11 comments fedilink hide all child comments

cross-posted from: https://discuss.tchncs.de/post/21298994

I'm trying to feel more comfortable using random GitHub projects, basically.

you are viewing a single comment's thread
view the rest of the comments

[–] Static_Rocket 10 points 2 months ago (2 children)

You would first need to define malicious code within the context of that repo. To some people, telemetry is malicious.

[–] [email protected] 1 points 2 months ago

@Static_Rocket
@unknowing8343

Under the GDPR any data processing must be proportional to its goal, the goal must be transparent and justified and the processing must be limited to its goal. Telemetry is perfectly fine if you keep to the rules and malicious if you don't. So simple are things. And no, this can't be judged by looking at the repo, it is the deployment that matters. Nonetheless some code is always malicious, some code should be deployed with care. Would be good to scan for those.

load more comments (1 replies)