Simplified onboarding for deepsec

deepsec, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command.


The init command now automates the standard setup process:

• 
  creates the isolated .deepsec/ workspace, the only thing added to your repository, and installs its dependencies
  
  
• 
  configures model access, through Vercel AI Gateway or your own provider keys
  
  
• 
  generates a description of the codebase and its attack surface that every later review depends on
  
  
• 
  runs a pattern scan, generating extra scan patterns where the built-in set leaves coverage gaps
  
  
• 
  starts the AI review of the flagged files
  

Setup is checkpointed after each step. If a run stops, whether from closing the process, a failed step, or a hit cost or duration limit, re-running init resumes from the last completed step.

Run npx deepsec init to start your first scan, or read the docs to learn more.

Read more

Continue reading...