-
bsights-engine-spark-fork
An internal engine for executing bSights Measure and Healthcare CQL rule libraries in Spark from Helix pipelines. Part of the bSights internal products and services.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
Pixeebot
Pixeebot finds security and code quality issues in your code and inbound pull requests and creates merge-ready pull requests with recommended fixes. Pixeebot integrates with third party security tools such as Sonar, Semgrep, and CodeQL to automatically fix findings from each tool's scans.
-
upload-tool-results-action
A GitHub Action that allows Pixeebot to fix issues found by other code scanners
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
We made a bot, built on an [open source framework](https://codemodder.io), that fixes the problems Sonar (and others!) find in your code. Here are a handful of examples of pixeebot fixing Sonar findings on some OSS code:
https://github.com/nahsra/cql-evaluator-fork/pull/1/files
https://github.com/nahsra/bsights-engine-spark-fork/pull/1/f...
https://github.com/pixee/pygoat/pull/2/files
The changes aren't all super fancy, but we're orienting towards solving real problems and remediating issues -- grunt work you don't want to have to do, but compliance says you should (and you probably should)!
Right now, we fix around 25 of the things that Sonar commonly finds (and a lot more that it doesn't find!). You can see the complete list of things we fix here:
https://docs.pixee.ai/codemods/overview/
I'll tell you, it's so much nicer to receive PRs than tool warnings.
To try it out:
1. Install the Pixeebot GitHub App on a Sonar-monitored GitHub repository
- https://github.com/apps/pixeebot
https://github.com/pixee/pygoat/pull/2/files
The changes aren't all super fancy, but we're orienting towards solving real problems and remediating issues -- grunt work you don't want to have to do, but compliance says you should (and you probably should)!
Right now, we fix around 25 of the things that Sonar commonly finds (and a lot more that it doesn't find!). You can see the complete list of things we fix here:
https://docs.pixee.ai/codemods/overview/
I'll tell you, it's so much nicer to receive PRs than tool warnings.
To try it out:
1. Install the Pixeebot GitHub App on a Sonar-monitored GitHub repository
- https://github.com/apps/pixeebot
- Put that token in a SONAR_TOKEN repository secret
3. Add the GitHub Action that will connect Pixeebot to Sonar
- Copy this sample action into your repo: https://github.com/pixee/upload-tool-results-action/blob/mai...