Vercel、オープンソースセキュリティレビュー「deepsec」のオンボーディングを簡素化

deepsec, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command.

The init command now automates the standard setup process:

creates the isolated .deepsec/ workspace, the only thing added to your repository, and installs its dependencies

configures model access, through Vercel AI Gateway or your own provider keys

generates a description of the codebase and its attack surface that every later review depends on

runs a pattern scan, generating extra scan patterns where the built-in set leaves coverage gaps

starts the AI review of the flagged files

Setup is checkpointed after each step. If a run stops, whether from closing the process, a failed step, or a hit cost or duration limit, re-running init resumes from the last completed step.

Run npx deepsec init to start your first scan, or read the docs to learn more.

Read more