Simplified onboarding for deepsec
- Source
- vercel.com
- Author
- Malte Ubl
- Date

Context
Vercel's open-source security review tool deepsec now sets up a repository and runs its first review from one command, npx deepsec init. Vercel's changelog entry lists what the command automates: creating an isolated workspace folder (the only thing added to the repository), configuring model access, generating a description of the codebase and its attack surface that later reviews depend on, running a pattern scan that can generate extra patterns where built-in coverage has gaps, and starting AI review of the flagged files. Each step is checkpointed, so if the run stops because of a failure or a cost or duration limit, running init again resumes from the last completed step. The entry describes less manual setup and recoverable runs, and reports no results about how well deepsec finds problems.
Checking sign-in…
Loading comments…






