What it does
Security classifications can include associated CWE categories.
Apps & data pipelines
commit-miner
A Rust tool that uses Jev to classify Git commits by change type, bug-fix status, and security relevance.
Bookmark: commit-miner
Keep this in your collection.
Leave a noteWhat would you try with this?
: commit-miner
Only you can see your notes.
Screenshot unavailable. Open the experiment ↗
How you can use it
You can use this tool to review past changes in a coding project to spot bug fixes and security flaws. A developer can set it up on your machine, provide an access key that connects to TypeSafe, and point it at a web link or a folder of code on your computer.
The program scans the update history and produces a clear webpage or spreadsheet report highlighting safety categories. Keep in mind that processing large histories sends text to the connected analysis service, which costs money based on the amount of data examined.