Hacker GitHub

← All repos

lunasec-io/lunasec

View on GitHub ↗ ★ 1,473 TypeScript

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

39 mentions on Hacker News by 4 people: 3 stories, 36 comments · first 2021-11-01 · latest 2024-09-14

Mentions per year 39 mentions · busiest year 2022 (24)
20082026
AllStoriesComments NewestTopOldest
  1. …EFI booting? I helped write a guide a few years back that still is what I do using systemd-boot. https://github.com/lunasec-io/lunasec/blob/master/docs/blog/... How is Wayland support these days? I love i3 but I know Sway promises to be…
    comment by freeqaz · 2024-09-14 · in Installing Arch Linux on a Laptop
  2. …this is related to where our heads are at, but we would want to have the core be open for that! 0: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2023-03-06 · in Launch HN: Vellum (YC W23) – Dev Platform for LLM Apps
  3. …one clean swoop. It's messy. 0: https://www.trendmicro.com/vinfo/us/security/news/cybercrime... 1: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2023-02-24 · in Aggressive Attack on PyPI Attempting to Deliver Rust Executable
  4. …one clean swoop. It's messy. 0: https://www.trendmicro.com/vinfo/us/security/news/cybercrime... 1: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2023-02-24 · in NPM repository flooded with 15,000 phishing packages
  5. …that are interested in working with us. My email is on my profile. Cheers! [0]: Source Code, https://github.com/lunasec-io/lunasec/
    comment by freeqaz · 2023-01-27 · in Ask HN: Those making $0/month or less on side projects – Show and tell
  6. …/docs/blog/how-to-mitigate-open-source... 2: GitHub project building better dependency patching tools https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2022-12-30 · in Log4Shell Still Has Sting in the Tail
  7. …C Competition" http://www.underhanded-c.org/ 1: Open Source "Supply Chain Security" platform https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2022-12-27 · in Detecting the use of “curl | bash” server side (2016)
  8. …and Artifactory also exist in this space. We're working on something similar that's on GitHub here: https://github.com/lunasec-io/lunasec Proxy support isn't built out yet but the data is all there already.
    comment by freeqaz · 2022-11-03 · in Dozens of malicious PyPI packages discovered targeting developers
  9. …difficult to get that initial momentum. Does anybody else have thoughts to share about this? 0: https://github.com/lunasec-io/lunasec/blob/master/LICENSE.md 1: Open (Source) for Business: A Practical Guide to Open Source Software Licensing…
    comment by freeqaz · 2022-10-28 · in Preventing the bait and switch by open core software companies
  10. …the results. I need to update the docs!) 0: https://yangdanny97.github.io/blog/2019/05/03/MOSS 1: https://github.com/lunasec-io/lunasec/tree/master/lunatrace
    comment by freeqaz · 2022-10-17 · in GitHub Copi­lot inves­ti­ga­tion
  11. Here is some code on GitHub that does call site checking using SemGrep: https://github.com/lunasec-io/lunasec/blob/master/lunatrace/... (Note: I helped write that. We're building a similar service to the r2c one.) You're right that…
    comment by freeqaz · 2022-10-04 · in Ignore 98% of dependency alerts: introducing Semgrep Supply Chain
  12. …Diffusion or NFTs) but they are important! 0: https://news.ycombinator.com/item?id=32037562 1: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2022-09-19 · in There is no “software supply chain”
  13. …few hours. (With zero prior experience with the CDK) You can see that code here if you're curious: https://github.com/lunasec-io/lunasec/blob/master/lunatrace/... It's more complicated now but if you look at the history of that…
    comment by freeqaz · 2022-09-09 · in Ask HN: How do you deploy your weekend project in 2022?
  14. …2: https://github.com/ossillate-inc/packj 3: https://ossillate.com/ 4: https://socket.dev/ 5: https://github.com/lunasec-io/lunasec/
    comment by freeqaz · 2022-09-07 · in Why has software supply chain security exploded?
  15. …money is a hosted SaaS, of course.) Anyway, I'm happy to answer any questions around this stuff! 0: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2022-09-06 · in Vulnerability Management for Go
  16. …for Kubernetes to be startup-friendly? (We're using ECS right now via the normal CDK[0]). 0: https://github.com/lunasec-io/lunasec/blob/master/lunatrace/...
    comment by freeqaz · 2022-09-06 · in cdk8s: CNCF-Backed Infrastructure-as-Code (IaC) for Kubernetes
  17. …stuff, but we already determined that rage sustains me.) Thank you. climbs off of soap box 0: https://github.com/lunasec-io/lunasec 1: https://www.lunasec.io/docs/blog/the-issue-with-vuln-scanner... 2:…
    comment by freeqaz · 2022-09-06 · in Vulnerability Management for Go
  18. …1: https://medium.com/uber-security-privacy/code-provenance-app... 2: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2022-08-26 · in A toolbox for a secure software supply chain
  19. …to the GitHub[1] for it all. 0: https://www.lunasec.io/docs/pages/lunadefend/overview/introd... 1: https://github.com/lunasec-io/lunasec/tree/master/lunadefend
    comment by freeqaz · 2022-08-20 · in Supabase Vault
  20. …looking website, but you can get away with pretty crappy docs if you do all of the above. 0: https://github.com/lunasec-io/lunasec/
    comment by freeqaz · 2022-08-03 · in How to support open-source software and stay sane (2019)
  21. …false positive trap. I'd love to chat with anybody feeling this pain (even just as therapy lol). 0: https://github.com/lunasec-io/lunasec 1: https://www.lunasec.io/docs/blog/the-issue-with-vuln-scanner...
    comment by freeqaz · 2022-07-21 · in Log4j: The pain just keeps going
  22. …been working on an Open Source SBOM database called LunaTrace[0] to help fix what I wrote above. 0: https://github.com/lunasec-io/lunasec/tree/master/lunatrace
    comment by freeqaz · 2022-07-17 · in Microsoft open sources Salus software bill of materials (SBOM) generation tool
  23. …How does that compare to the state of the world for things like Pulumi or Terraform these days? 0: https://github.com/lunasec-io/lunasec/tree/master/lunatrace/... Any of these files represents the infrastructure. The "bin" folder is the…
    comment by freeqaz · 2022-05-24 · in Libaws: A simpler way to declare AWS infrastructure
  24. …is on my profile if you'd like to chat directly. That offer extends to anybody else, too! [0]: https://github.com/lunasec-io/lunasec/ [1]: https://www.lunasec.io/docs/blog/how-to-build-an-open-source...
    comment by freeqaz · 2022-05-18 · in Uncurled – running and maintaining Open Source projects for three decades
  25. …services. Would Courier be a good fit for an Open Source product like what we're building[0]? 0: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2022-03-02 · in Launch HN: Courier (YC S19) – Developer infrastructure for product notifications
  26. …honestly thought about making that code[0] a stand-alone library because of how valuable it was. 0: https://github.com/lunasec-io/lunasec/blob/master/js/sdks/pa...
    comment by freeqaz · 2022-03-02 · in Show HN: Miniboss, versatile local container management with Python
  27. …a real problem! 0: https://stackoverflow.com/questions/31466428/how-to-restart-... 1: The code: https://github.com/lunasec-io/lunasec/blob/master/js/sdks/pa... 2: The package it lives in: https://github.com/lunasec-io/lunasec/tree/master/js…
    comment by freeqaz · 2022-03-02 · in Show HN: Miniboss, versatile local container management with Python
  28. ▲ 10
    Ask HN: Is funding the actual problem holding back Open Source security?
    story by freeqaz · 2022-02-04 · 5 comments
  29. …us identify "niche" problems that companies struggle with. Building a startup is hard work! 0: https://github.com/lunasec-io/lunasec/ 1: https://www.lunasec.io/docs/blog/log4j-zero-day/
    comment by freeqaz · 2022-01-24 · in Huginn: System for building agents that perform automated tasks online
  30. …from the last release. 0: https://github.com/apache/logging-log4j2/blob/master/log4j-c... 1: https://github.com/lunasec-io/lunasec/releases/ 2: https://twitter.com/marcioalm/status/1471740771581652995
    comment by freeqaz · 2021-12-17 · in Log4Shell Update: Full bypass found in log4j 2.15.0, enabling RCE again
  31. …and it's a real pain in the neck lol. Especially for Vendor software that you don't control. 0: https://github.com/lunasec-io/lunasec/tree/master/tools/log4...
    comment by freeqaz · 2021-12-16 · in Log4j 2.15.0 – Previously suggested mitigations may not be enough
  32. …encapsulation" new Java introduces. BTW, the java code that actuanlly performs the patching : https://github.com/lunasec-io/lunasec/blob/master/tools/log4...
    comment by avodonosov · 2021-12-15 · in Log4Shell update: second Log4j vulnerability published
  33. …if you want more details. :) 0: https://www.lunasec.io/docs/blog/log4j-zero-day/#how-the-exp... 1: https://github.com/lunasec-io/lunasec/blob/master/tools/log4...
    comment by freeqaz · 2021-12-15 · in Log4Shell update: second Log4j vulnerability published
  34. …that have log4j 2.x in them and it didn't find any of them. I guess for the reason described here: https://github.com/lunasec-io/lunasec/issues/301 This is less than helpful if people use this and then believe they are safe.
    comment by tbirdny · 2021-12-15 · in Log4Shell update: second Log4j vulnerability published
  35. …more places, and also hosted it so that you don't have to muck with DNS and live server stuff.) 0: https://github.com/lunasec-io/lunasec/releases/ 1: (Go source code) https://github.com/lunasec-io/lunasec/tree/master/tools/log4... 2:…
    comment by freeqaz · 2021-12-15 · in Log4Shell update: second Log4j vulnerability published
  36. …code in the post was using log4j1, though the description only explicitly mentions log4j2. [0]: https://github.com/lunasec-io/lunasec/pull/270 [1]: https://github.com/lunasec-io/lunasec/pull/277
    comment by maxdamantus · 2021-12-10 · in Log4j RCE Found
  37. ▲ 3
    Ask HN: Best way to get feedback from developers?
    story by freeqaz · 2021-11-23 · 4 comments
  38. …the best dynamics are for teams to be productive. Thanks for the insight into your team dynamic! 0: https://github.com/lunasec-io/lunasec
    comment by freeqaz · 2021-11-03 · in Are daily standups hurting your team?
  39. ▲ 2
    Show HN: Open-Source Data Security Platform
    story by freeqaz · 2021-11-01 · 1 comment