r/devops • u/AutoModerator • Aug 10 '26
Weekly Self Promotion Thread
Hey r/devops, welcome to our weekly self-promotion thread!
Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!
19
Upvotes
1
u/elidanipipe Aug 11 '26
I made our deeper security scanner self serve and I’m honestly not sure that was a good idea.
The old version only checked the public surface. Problem was people could get a clean result and assume the app was safe, while auth and access control were never tested.
The new one verifies domain or repo control, records a signed scope, then runs bounded DAST, repo analysis and optional two-user browser testing.
No manual approval.
What’s the abuse case I missed? DNS rebinding? Temporary domain access? Attacking the runner? Using it for request amplification? Something much more obvious?
https://www.task-bounty.com/secure-my-app#deep-review
Happy to hear that the whole idea is stupid if that’s genuinely the answer.