Vercel Security Review 公测:每次推送自动扫描漏洞并可由 Agent 修复
我一直期待着这一天,因为 Vercel 有一个内部安全代理,它的效果惊人地高效(被亲切地称为 @𝚑𝚊𝚌𝚔𝚎𝚛)。每一行代码都会被自动审计。
现在,你也可以获得同样的强大功能。只需在你的所有仓库上启用它(无论你是否托管在 Vercel 上,这个产品都能工作),你的安心程度就会大幅提升。你会看到它捕捉到其他代理忽略的东西。
为什么:你不能仅仅指望你的工程师掌握某种技能,提示“请确保安全”,或者赌代码一开始就好的运气。
这个的另一个酷炫之处在于,它完全是由我们的安全团队开发的。外面的很多公司现在可能正疯狂招聘。如果你想以软件的形式“下载一个安全团队”,这是在今天能得到的最接近的东西。
对照原文
I've been looking forward to this day, because Vercel has an internal security agent that is **astonishingly effective** (lovingly called @𝚑𝚊𝚌𝚔𝚎𝚛). Every single line of code gets audited, automatically. You can now get the same power. Just enable it on all your repos (this product works whether you host on Vercel or not) and your peace of mind will increase tremendously. You'll see it catch things that every other agent misses. Why: you cannot just bank on your engineers having a skill installed, prompting "please make secure", or rolling the weights' dice that the code is good out of the gate. The other cool thing about this is that this was entirely developed by our security team. A lot of companies out there are probably in a mad rush right now trying to staff up. If you wanted to 'download a security team' as software, this is the closest you get today.