Package Hunter: Detect malicious code in dependencies
Jul 23, 2021Dennis Appelt
Summary
Introduced Package Hunter, a new tool for detecting malicious code in program dependencies. Package Hunter installs dependencies in a sandbox and monitors system calls using Falco. It supports NodeJS modules and Ruby Gems and integrates with GitLab CI.
More from the GitLab Secrets Manager trail
- GitLab Secrets Manager adds ESO, Terraform, API support
- Manage CI/CD credentials with GitLab Secrets Manager
- A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
- Solving complex challenges with GitLab Duo Workflow
- How to scan a full commit history to detect sensitive secrets