Show HN: TypeScript Security Scanner

9 points by gmontard 3 years ago | 2 comments

Hi HN,

I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution.

After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support!

In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own.

The rules list is here: https://docs.bearer.com/reference/rules/

It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already provide good insights.

If you have some TypeScript code, we would love for you to try it out and let us know in the comment below or on our Discord your experience and how we can improve the findings.

You can access the repo here: https://github.com/Bearer/bearer

Thank you again!

ashishbijlani 3 years ago |

Cool project. Would love to integrate this in Packj [1] as one of the open-source SAST scanners. Will DM you.

1. https://github.com/ossillate-inc/packj flags malicious/risky open-source dependencies.

cfabianski 3 years ago |

Hi HN,

I'm super happy to provide TS support today. It has been a strong ask from the community after JS support.

Every rule written for JavaScript will work for both.

Please do let us know if you have any feedback!