Building Asset and Risk Management on Codebase with Semgrep | HackerNoon
Briefly

Microservices are typically organized around API handlers that interact with databases and external clients, creating a structure susceptible to vulnerabilities related to data management and service interactions.
The handlers connect to various tables in the service's databases, like public.Puppets and public.GoldenKeys, which highlights the need for secured access rules to mitigate risks.
By extracting the structure of objects from code using Semgrep rules, we can analyze vulnerabilities associated with the number and types of interactions occurring in the API.
Understanding where and how discovered data can impact risk levels allows for better anticipation of vulnerabilities, ultimately leading to improved security protocols in a microservice architecture.
Read at Hackernoon
[
|
]