How BrassCoders Designed Opt-In Usage Telemetry
A security scanner that phones home has a trust problem. How BrassCoders 2.1.0 made telemetry off by default, readable before it sends, and easy to refuse.
Oct 4, 202612 min read
Command Palette
Search for a command to run...
#opensource
Articles tagged with #opensource
Run BrassCoders Automatically in a Claude Code Hook
Wire a Claude Code hook to run brasscoders scan on every edit, so .brass/ai_instructions.yaml stays fresh and the assistant reads findings without copy-paste.
Aug 29, 20267 min read
Scan, Patch, Re-Scan: Verifying AI Bug Fixes
BrassCoders closes the loop on AI-written bugs: scan for the finding, hand it to your assistant for a patch, then re-scan to confirm the fix deterministically.
Aug 29, 20267 min read
How to Run BrassCoders on Every Commit (and Why It Isn't Automatic)
BrassCoders is a command-line scanner you invoke, not a background daemon. It runs on every commit only once you wire it into CI on push or a git pre-commit hook — here's how to set up both, why there's no auto-run mode, and how it gates the build on CRITICAL findings.
Aug 19, 20265 min read
Tuning .brassignore: Suppressing a False Positive in Three Steps
BrassCoders flags MD5 in a file-deduplication script as a CRITICAL security finding. The pattern match is correct — the context makes it a false positive. Here's the before scan, the .brassignore entry, and the after scan.
Aug 8, 20266 min read
From HIGH to Clean: Removing a Hardcoded HMAC Key in AI-Generated Python
A real before-and-after: BrassCoders's SecretsScanner finds a hardcoded HMAC signing key in a corpus Python file. The environment variable fix, the re-scan, and why detect-secrets catches this where Bandit alone misses some cases.
Aug 8, 20267 min read