GuardRails

Great software to scan for vulnerabilities into code repositories

Comments: Overall, the experience with GuardRails is great.

Pros:

We've started using guard rails recently, but it has already proven very useful in finding issues with old code, giving us more visibility into issues we didn't know, and allowing us to plan their fixing.

Cons:

Had some issues while attempting to connect Bitbucket, but it works without problems now.

review for guardrails

Pros:

to get some findings of sourcode from gitlab repository before publish on production.

Cons:

somehow there is an library that should be update on guardrail, so we have to contact the prinicipal of guardrails to solve this issue.

A great vulnerability management security tool

Comments: GuardRails helped our team with source code level vulnerability detection to improve the company's internal vulnerability and security maintenance process.

Pros:

Finds source code level vulnerability and easier integration with all the version control tools.

Cons:

Sometimes the code scan results are prone to false positives. I think it could be improved over time.

Scanning for source code vulnerabilities

Comments: A useful addition to our security suite.

Pros:

Easy to use. Integrates well with GitHub and runs against every pull request.

Cons:

It does return quite a few false positives.

Simple Bitbucket plugin that finds security issues in your code

Pros:

easy to use, no configuration needed, pull request scanning, great for small teams

Cons:

The access control could be better: Everyone from my team can connect to the tool. I can assign different roles, but there's not way to approve or revoke access in general.