OWASP SEDATED
summary
SEDATED is a server-side Git pre-receive hook that scans pushed deltas and rejects pushes with violations rather than just reporting them. It ships ~75 regexes, a whitelist-by-commit workflow via pull requests, and unit plus integration tests; typical performance is 2.2s for a single 640k‑line delta and 0.8s for 250 files (50k lines) well under a 5-second timeout. Source is being open sourced under OWASP and integration hooks and repo-whitelisting are provided to handle bulk imports. pre-receive hook
AI-written summary · about
chapters (6)
- 0:00Start
- 6:49Demo - Happy Path
- 8:17Demo - Sad Path
- 13:07Demo - Whitelisting
- 19:14Source Code Snippet
- 20:16Regexes Snippet
related talks
26mSecurity Automation For GraphQL
31mFrom Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.)
49m"The SAST and the furious"
01h 00mDependency Check Project
46mSecurity DevOps - Staying Secure In Agile Projects
01h 18mDevSecOps - Automating Security in DevOps
28mDevSecOps - Security from Scratch
25mHacking Like a FED
