Vercel 釋出名為 @hacker 的內部安全代理,能自動審核每一行程式碼。
- - 功能:即時掃描程式碼,發現其他工具忽略的安全缺陷。
- - 可用性:開啟後即適用於所有儲存庫,無論是否託管於 Vercel。
- - 開發背景:由 Vercel 安全團隊自行打造,提供類似「下載安全團隊」的功能。
AI 伴隨問答
針對這篇報導有疑問?可直接點選快捷問題或向 AI 追問背景脈絡與技術細節:
I've been looking forward to this day, because Vercel has an internal security agent that is **astonishingly effective** (lovingly called @𝚑𝚊𝚌𝚔𝚎𝚛). Every single line of code gets audited, automatically.
You can now get the same power. Just enable it on all your repos (this product works whether you host on Vercel or not) and your peace of mind will increase tremendously. You'll see it catch things that every other agent misses.
Why: you cannot just bank on your engineers having a skill installed, prompting "please make secure", or rolling the weights' dice that the code is good out of the gate.
The other cool thing about this is that this was entirely developed by our security team. A lot of companies out there are probably in a mad rush right now trying to staff up. If you wanted to 'download a security team' as software, this is the closest you get today.