Subscribe
Sign in
Pixeebot — Your automated product security engineer
Pixeebot is your automated product security engineer, reviewing your code and recommending changes via merge-ready pull requests to improve code security, performance, and quality.
51
Replies
1 fix is better than 100 findings!
Great job on this super-easy super-helpful GitHub app, @pixeebot
Your blend of opensource-core boosted by AI makes this even more impressive.
@rick_fan - you're asking the exact right question. Before we even started building the product the first thing @nahsra and I researched is your question. We only wanted to build a product that we were confident could accurately and broadly fix the most critical and important vulnerabilities developers have been focused on the past decade. Given our prior experience building the most accurate security scanning tool in the market, we are also confident (and validated with our research) that we indeed fix the same. We're just getting started, but we already cover the bulk of the most critical and high vulnerabilities with many more coming. You can see all of it at our docs: https://docs.pixee.ai/codemods/o...
This will be a game changer in product security. Cool product. Congrats on the launch.
@sewell_stephens thanks! We ❤️ snyk. The biggest difference is Snyk is built to find problems (and create JIRA tickets). Pixeebot will do the work of re-writing your code to fix the problems they find. So they work perfectly side-by-side.
@iulspop my personal favorites are the most critical issues like SQL injection or command injection that we've seen merged. That said, we also have a couple that are going through the responsible disclosure process currently and will be published as CVEs soon! 💪
Amazing product, a must try for all! Congratulations on the product hun launch - Surag and team!
Love the value proposition. It's not only about finding the problem -- fixing and testing quickly is where most of the time is spent by the developers. Thank you, Surag and Pixee team, for bringing the innovative solution with Pixeebot.
Security has always yelled about things -- I should know, I spent my career doing the same -- but never fixed anything.
I am so happy to show the world pixeebot! We help developers think less about security by issuing them PRs to fix the issues in their code. If you want better code and you never want to leave GitHub, this is your tool!
Eager for your feedback!
@gilday In short, we use AI selectively & with purpose where it is truly additive to the user value, not as a blunt instrument. We aren't using AI for sake of saying it's AI, but there are many ways in which AI is uniquely helpful for this use case when used purposefully. Some of our "Pro" codemods leverage AI to add context to only make changes that appropriate for that precise code base/repo. Sometimes we use it to add commentary that explains why we made a change and provide additional context specific to your code. Many more features are on the way too...
@terradactyl Yes! We've already built in the capability to take what a 3rd party scanner (e.g. Sonarqube, Semgrep or GitHub CodeQL) find and make a merge-ready pull request for the developer. This will save them MANY hours of time figuring out the problem, how to fix it and discussing it with the Security team. We will continue to expand this to many more tools as users request.
Love how Pixeebot acts as your automated security engineer, offering code insights and merge-ready suggestions!
Love the value prop here — not only does Pixeebot catch bugs when you submit PRs, but it also proposes changes to fix them! It's like having another code reviewer on your team.
It can also look backwards across your codebase to find and propose fixes to bugs in your codebase.
And it's better than just an LLM making up fixes; the team has its own proprietary system for finding and composing vetted solutions.
You want Pixeebot watching your repo.
Pixee