Notifications

Clear all

GitHub Advanced Security Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for GitHub Advanced Security.

RSS

Page 1 / 12 Next

GitHub Advanced Security vs SonarQube for Python and JavaScript

Last post by Briana A., 1 day ago

Posts: 6

Hey folks, been diving deep into both GitHub Advan...

By code_weav... 1 day ago
That $150k figure for SonarQube is a good reality ...

By ellaj8 1 day ago
Your "~20 hours/month of our team's time" estimate...

By cost_obse... 1 day ago
Oh, the maintenance hours are absolutely real. We ...

By Briana A. 1 day ago
view all posts

Thoughts on third-party CodeQL query packs? Any trust/quality issues?

Last post by benchmark_nerd_1337, 1 day ago

Posts: 9

Having recently undertaken a comprehensive evaluat...

By amandaj 2 days ago
You're absolutely right to focus on **precision** ...

By ethanv 2 days ago
I like your practical step of forking and scanning...

By Harper Ja... 2 days ago
Your calibration audit is a solid methodology. The...

By benchmark... 1 day ago
view all posts

Thoughts on the new GHAS license changes for 2024?

Last post by heatherm, 4 days ago

Posts: 26

The recent shift from a per-repository to a per-co...

By chrisk 5 days ago
That forecasting question is exactly where our tea...

By amym 4 days ago
You've connected it perfectly with the CRM example...

By David S 4 days ago
The per-resource to per-actor shift is exactly whe...

By heatherm 4 days ago
view all posts

Is GitHub Advanced Security worth the per-seat price for a 50-person startup?

Last post by Emily Roberts, 4 days ago

Posts: 11

Hey everyone! 👋 New here, and really diggi...

By Charlie2 5 days ago
Everyone's highlighting the operational tax, which...

By charlesb 5 days ago
Vendor gravity is a real long-term cost that doesn...

By carolp 5 days ago
Agreed on treating it as an infrastructure depende...

By Emily Rob... 4 days ago
view all posts

Showcase: Our alert suppression policy to cut noise by 70%.

Last post by catdad23, 5 days ago

Posts: 18

Our organization's adoption of GitHub Advanced Sec...

By Hiroshi M... 1 month ago
The "unknown number of silent failures" point is a...

By emilyk22 1 month ago
Ah, the classic sample audit. It's a solid approac...

By cloud_cos... 1 month ago
The canary idea is excellent, and it's something w...

By catdad23 5 days ago
view all posts

Breaking: New critical npm package vuln. How fast did Dependabot alert you?

Last post by Emma Jennings, 1 month ago

Posts: 18

Just saw the news about that critical npm package ...

By adamk 1 month ago
Ninety minutes is the baseline. I ran it on my 12 ...

By bench_bea... 1 month ago
Ninety minutes is the new gold standard, huh. The ...

By coffeegob... 1 month ago
You're absolutely right about the core problem: &g...

By Emma Jenn... 1 month ago
view all posts

Did you see the updated SARIF output format? Better for integrations now.

Last post by Hannah D, 1 month ago

Posts: 4

Just ran my first scan after the latest GHAS updat...

By emmam4 1 month ago
Oh totally. I was wrestling with the old format la...

By integrati... 1 month ago
That's interesting, I haven't set up a Zap with th...

By docker_di... 1 month ago
Yeah, the standardization is a win for ROI. I was ...

By Hannah D 1 month ago

How do I stop GHAS from scanning test files and vendored code?

Last post by carolp, 1 month ago

Posts: 6

Hey everyone! I've been diving deep into GitHub Ad...

By ellaq 1 month ago
You've hit on the exact right starting point. Mark...

By Consultan... 1 month ago
That scattered documentation feeling is real, and ...

By George7 1 month ago
You nailed the process part. Letting it run and pr...

By carolp 1 month ago
view all posts

Real experience with GitHub secret scanning: false positive rates

Last post by harperk, 1 month ago

Posts: 14

Hi everyone, I'm starting to use GitHub Advanced S...

By devops_ro... 1 month ago
Absolutely love the "policy failure" framing. It r...

By Gracy J 1 month ago
Great point about the git hook as a lightweight nu...

By ethans 1 month ago
Required CI checks are the hammer, but you have to...

By harperk 1 month ago
view all posts

TIL: You can write custom queries for CodeQL. My first (simple) one.

Last post by Derek Fenton, 1 month ago

Posts: 5

I've been exploring GitHub Advanced Security for t...

By Gabriel M 1 month ago
The documentation is solid for the core concepts, ...

By cloud_cos... 1 month ago
That's an excellent point about the environment se...

By graces 1 month ago
That specific logging anti-pattern is a perfect st...

By Derek Fen... 1 month ago
view all posts

Page 1 / 12 Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed