No One Talks Enough About Security for AI Coding. Here's How I Do It in My Workflows

תקציר מקורי באנגליתAI has almost solved writing code - at least in many ways. But it certainly doesn't produce secure code! I see vulnerabilities turn up in AI generated code constantly, and almost nobody is building for it. So this is the setup I actually use. The agent still does the work. The difference is that a security scan sits inside the workflow as a step it cannot skip, and it is not another agent giving an opinion. Two tools do the job - Archon runs the workflow and Sonar decides whether the work is allowed out. Archon is open source and Sonar is free to start with! The workflow itself is linked below, and the idea transfers to whatever you already use. ~~~~~~~~~~~~~~~~~~~~~~~~~~ Check out Sonar (SonarQube Cloud, free for open source): https://fandf.co/4x9mJfM ~~~~~~~~~~~~~~~~~~~~~~~~~~ - Join Dyn