APPSEC GUIDES, NOT GATES: INTRODUCING SECURE GUARDRAILS WITH SEMGREP

Summary from the TLDR InfoSec newsletter

Use secure guardrails instead of traditional “shift-left” gates. Secure guardrails integrate directly into developer workflow, should offer autofixes or advice that aligns with organization policies, and should empower developers to write more secure code and use secure-by-default libraries while also allowing developers to adjust or override guardrails when needed. Semgrep can be used to implement secure guardrails and provides a scorecard to grade your implementation of secure guardrails.