Most vulnerabilities start as ordinary bugs. 7 tools that catch them first:
1. Biome
2. oxlint
3. tsc --noEmit
4. Knip — dead code
5. dependency-cruiser
6. eslint-plugin-security
7. bun test
Code quality is security. app.stationx.net/book
Nathan House
@GotoNathan
Leading Cyber Security & AI Expert, Educator & Mentor | Helping you fast-track your career through the AI revolution | CEO at StationX
- 7 security rules our AI enforces on every commit: 1. Escape everything 2. SQL always parameterised 3. Nonce-based CSP 4. Wrap every LLM prompt 5. Errors leak nothing 6. Hash then compare secrets 7. Lock your cookies (3 flags) Write once, AI enforces. app.stationx.net/book
- Supply-chain attacks now hit the pipeline itself. 7 tools to secure CI/CD: 1. zizmor — audit Actions 2. actionlint — lint the YAML 3. pinact — pin to a SHA 4. Harden-Runner — EDR for the runner 5. Cosign/gitsign — sign builds 6. OpenSSF Scorecard 7. GitHub-native OIDC + branch
- Accenture is hiring a "Penetration Tester, Lead AI-Driven Security Testing." $126,000 to $244,000. That posting is live right now. The shift is in the job title. 🧵
- The same idea secures your code AND your AI agent — hooks that fire at the moment that matters: • git pre-commit / pre-push • AI PreToolUse — block before it acts • AI PostToolUse — check every edit • context + approval on every prompt This is how you govern AI.
