This is the first time I've heard of GuardRails. I'm looking over its home page now. Is it a CI/CD tool? Or is it specifically just for assessing vulnerabilities. It seems like a really neat tool!
Right now GuardRails is available as a GitHub application that gives you security feedback directly in your Pull Requests.
In many ways, it is similar to a CI/CD tool, but one that automatically orchestrates a wide range of security tools.
Based on the languages in your repository, it would automatically select the right engines to run, unify the results, filter out irrelevant findings and false positives. The security issues are then made available as a comment in the Pull Request, with links to relevant file and line. It also provides a link to our detailed documentation on how to fix a given issue based on the language it was identified in.
In a sentence, GuardRails continuously provides you with accurate and actionable security feedback directly in your development workflow.
Looking forward to getting your feedback. Let me know if you have any questions.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
This is the first time I've heard of GuardRails. I'm looking over its home page now. Is it a CI/CD tool? Or is it specifically just for assessing vulnerabilities. It seems like a really neat tool!
Hello Jess, thanks for the kind words!
Right now GuardRails is available as a GitHub application that gives you security feedback directly in your Pull Requests.
In many ways, it is similar to a CI/CD tool, but one that automatically orchestrates a wide range of security tools.
Based on the languages in your repository, it would automatically select the right engines to run, unify the results, filter out irrelevant findings and false positives. The security issues are then made available as a comment in the Pull Request, with links to relevant file and line. It also provides a link to our detailed documentation on how to fix a given issue based on the language it was identified in.
In a sentence, GuardRails continuously provides you with accurate and actionable security feedback directly in your development workflow.
Looking forward to getting your feedback. Let me know if you have any questions.