19
Any AI tool to analyse a git repo for malicious code?
(discuss.tchncs.de)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 31 Aug 2024
19 points (74.4% liked)
Open Source
31358 readers
68 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
- !libre_culture@lemmy.ml
- !libre_software@lemmy.ml
- !libre_hardware@lemmy.ml
- !linux@lemmy.ml
- !technology@lemmy.ml
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
But an AI can "realise" the code might be downloading something it doesn't need to. That's the point.
AI is "smart" and understands that you told it that the library was supposed to do something specific, and it can understand that and look for things that seem not correlated to the purpose of the repo.
If you're one of those people that think every product is better if there's "AI" on the box then sure. What you're describing is static analysis though, it is not new.
Where's that tool then?
Gitlab has a SAST tool
Its got a dataset of billions for tokens, youre better off running the stock market as an antivirus.
Instead if you care use specifically curated programs for the task, like antivirus'