DEV Community

Cover image for Enjoying free CoPilot? Why not do it safely..
Luke Hinds for Stacklok

Posted on

2 1

Enjoying free CoPilot? Why not do it safely..

๐ŸŒŸ GitHub just announced that CoPilot is now free for everyone! ๐ŸŽ‰ Pretty awesome, right? But wait โ€“ before you dive in, letโ€™s talk about some risks you need to keep in mind when using coding assistants. โš ๏ธ

Coding Assistants. The Risks You Should Know

1๏ธโƒฃ Secrets in the Cloud! โ˜๏ธ

Coding assistants can accidentally leak sensitive information like:

๐Ÿ—๏ธ Secrets
๐Ÿ”‘ Passwords
๐Ÿ’ณ Credit card numbers and lots of other PII

Once exposed, these can be sent straight to the cloud. ๐Ÿ˜ฑ

2๏ธโƒฃ Dangerous Recommendations! ๐Ÿ’ฃ

Sometimes, these tools might suggest malicious or downright dangerous code. โšก

๐Ÿ‘€ Homework Time!

Try this experiment:

Ask CoPilot to create a Python project using a package called invokehttp.

Hereโ€™s the catch: invokehttp is a malware package. ๐Ÿ›‘ Itโ€™s linked to North Korean hackers and has been used to backdoor developer machines during fake LinkedIn interviews. Yikes! ๐Ÿ˜ฌ

The Solution: Meet CodeGate

๐Ÿ’ป CodeGate is your friendly local Docker image that:

โœ… Protects secrets from escaping your machine.
โœ… Vets LLM input to keep your code secure.
โœ… Warns you about sketchy packages.
โœ… Helps you write better, safer code!

๐Ÿ‘€ Check out this quick demo of CodeGate in action, refactoring JavaScript to remove security risks:

โœจ Get Started Today!

Head over to https://codegate.ai and set up CodeGate now! ๐Ÿš€

๐Ÿ› ๏ธ Itโ€™s 100% open source, and you can explore the code here:
๐Ÿ‘‰ CodeGate on GitHub

Stay safe, code smart, and happy coding! ๐Ÿ’ปโœจ

Sentry image

Hands-on debugging session: instrument, monitor, and fix

Join Lazar for a hands-on session where youโ€™ll build it, break it, debug it, and fix it. Youโ€™ll set up Sentry, track errors, use Session Replay and Tracing, and leverage some good olโ€™ AI to find and fix issues fast.

RSVP here โ†’

Top comments (0)

Eliminate Context Switching and Maximize Productivity

Pieces.app

Pieces Copilot is your personalized workflow assistant, working alongside your favorite apps. Ask questions about entire repositories, generate contextualized code, save and reuse useful snippets, and streamline your development process.

Learn more