CodeRabbit Secure adds cross-repository vulnerability scanning
CodeRabbit launched Deep Scan in CodeRabbit Secure: agents trace vulnerabilities across dependency graphs spanning repositories and confirm exploitability in throwaway sandboxes. Findings are grouped by root cause to avoid duplicate alerts.
- Deep Scan runs in three phases: baseline, cross-repository traversal and delta reconciliation
- Traversal depth across dependencies defaults to a limit of three hops
- Critical findings like RCE and SQL injection are always verified in a sandbox
- One flaw in a shared library yields a single parent alert instead of dozens of duplicates
Read next
Security