Topic
security
2026 3 posts
- Introducing sarifix: Make Your Scanners' Findings Fixable sarifix reads SARIF from the scanners you already run, tracks findings across scans without relying on line numbers, and hands Claude Code the findings its own changes introduced so it fixes them before it finishes.
- sarifix Turns any SARIF-emitting scanner into a verified fixer. Today it diffs, plans and reports findings, and tells Claude Code about the ones its changes introduced.
- imagegate A Docker authorization plugin that refuses to create a container unless its image is cosign-signed by an identity you trust and carries a signed SBOM.