Builder, infosec, SCA and SAST enthusiast, blue team. Founder of OWASP dependency-check.
Northern Virginia
Joined May 2009
- Tweets2.5K
- Following235
- Followers1.2K
- Likes2.4K
Jeremy Long retweeted
Give “Trim Reaper” a try. 😎 The assessment-only prompt inventories your third-party libraries, direct and transitive, and flags which ones you can remove, consolidate, or replace. It’s read-only and won’t touch your code until you approve a plan.
github.com/jmanico/trim-reap…
I’m having really good luck using AI to manage third-party libraries. SCA tells you what’s vulnerable. This tells you what you didn’t need in the first place, which is where a lot of the real risk reduction lives.
Pro tip: run it in Astra or Fable, then have Sol or Opus review the output. Multi-model review ups your game, and crossing vendors is even better.
MIT licensed and free, just to help your cause. This is the kind of work we do at manicode.ai 🤙
Jim created a great little repo to help reduce supply chain risk in your apps. Thanks!
Check out my little repo at GitHub.com/jmanico/trim-reap… it’s all there for you!
Ever get tired of fixing the same issues over and over? Flow by ServiceNow lets you automate repeat requests in Slack, Teams, or email — go live in a day and save time for what really matters. Request access at letsflow.ai 🚀
Jeremy Long retweeted
We have a great opportunity to join ServiceNow! The DevSecOps team is an amazingly talented group. We are looking for a Senior Manager to join the team and help drive innovation and protect our products.
jobs.smartrecruiters.com/Ser… via @SmartRecruiters
We have a great opportunity to join ServiceNow! The DevSecOps team is an amazingly talented group. We are looking for a Senior Manager to join the team and help drive innovation and protect our products.
jobs.smartrecruiters.com/Ser… via @SmartRecruiters
Great opportunity to join one of the best places to work:
Staff Red Team Engineer. jobs.smartrecruiters.com/Ser… via @SmartRecruiters
I've known this since the day I joined back in 2022 - glad to see this is being recognized: ServiceNow has been named one of Fortune’s World’s Best Workplaces for the third year in a row!
See what makes our workplace one of the world’s best: spr.ly/60167k1Z6
The @owasp Board of Directors election starts tomorrow! Many people do not know me by name, but they know my work on DependencyCheck. I've been volunteering with OWASP for over a decade. If you are an OWASP member, I would be honored to have your vote.
I would also encourage you to vote for two other highly qualified candidates: Steve Springett and @jerryhoff
It's amusing to watch agentic coding tools reason through problems - just like a junior programmer. "Ah, I see the problem. I need to do X to solve this.", makes changes and runs the compiler, compilation fails, "Now I understand X wasn't the right way to solve this, let me do Y"
Mark your calendars! Join us live on September 10 for the Zurich platform release event. Discover how we’re revolutionizing work with hybrid workflows, flexible app dev, and advanced security on a single, scalable, hyper-intelligent platform. spr.ly/6012ABtg8
This is a great opportunity at ServiceNow! Join the DevSecOps team to help design and build solutions for Model Scanning and other LLM/AI/Agentic/etc. security concerns.
jobs.smartrecruiters.com/Ser…
ServiceNow is looking for a manager for the DevSecOps SRE team. Hybrid role in Chicago or San Diego. This is a great organization to join.
jobs.smartrecruiters.com/Ser…
Great opportunity at ServiceNow - we are hiring a Product Security Engineer working on our testing team (Chicago, Santa Clara, or San Diego): jobs.smartrecruiters.com/Ser…
Great workout today. Ended with a few rounds of explosive wall ball that almost put me into an asthma attack. (yes I have an inhaler)
The DevSecOps team at ServiceNow is hiring: Security Manager | Site Reliability (SRE). This is a great opportunity to Join ServiceNow! jobs.smartrecruiters.com/Ser… via @SmartRecruiters
Jeremy Long retweeted
There are still a few seats left in our virtual secure code review course this Thur and Friday training.absoluteappsec.com
