Loading…
3
Bought a $1,200 license for that SCA tool and it caught a hardcoded AWS key on day one
I was mad about the price for a whole quarter, then it flagged a key sitting in a public repo for 8 months. My old free scanner never said a word about it. Anyone else get saved by a tool they almost cancelled?
1 comments
Log in to join the discussion
Log In1 Comment
thomasshah1mo ago
Man, be honest with yourself here. A free scanner would have caught that too if you had it set up right, with the rules and repo scanning turned on. The key sat there 8 months while you had some tool running, so the real problem was config, not price. And paying $1,200 a year for something a free tool does is how these vendors stay in business. You got lucky once, that does not mean the license earned its keep.
5