Skip to content

Comment on Welcoming Semmle to GitHubparent

Comments

Am I reading that right that it's only on public repositories though? For private repositories I guess you have to buy through Semmle directly (via call us pricing)?

This would make sense since Semmle would likely need access.

I'd be ready to put money on the fact that GitHub has access to all repositories, even private ones!

Of course they do, but they also have safeguards in place that prevent access without alerting auditors and eventually the repo owner.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.