Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
michelelizzit committed Jan 22, 2024
1 parent 902b94f commit e481015
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 7 deletions.
3 changes: 2 additions & 1 deletion COLLAB_MODE.md
Original file line number Diff line number Diff line change
Expand Up @@ -76,4 +76,5 @@ After deployment create additional user(s) for the extension collaborators. Each
Since the tool is intended for internal usage, currently the MongoDB users (testers) are required to have read and write permissions on the configured database. <br>
Consequently, everyone in the team can list, add or destroy projects. <br>
As previously described, per-project symmetric encryption keys are created and they must be shared among peers participating in an activity, in order to decrypt and read the stored data. In this way the confidentiality is project-oriented.
PoiEx stores the comment content and anchor as encrypted JSON objects as per the RFC7516 specification, using the AES-128-CBC algorithm.
The key is never stored on the remote database and needs to be manually shared by the user to all collaborators via a safe channel.
15 changes: 9 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -44,12 +44,15 @@ PoiEx allows users to:

A custom set of Semgrep rules has been developed. Each pair of language and Cloud Service Provider (CSP) needs a different ruleset, as a rule is generally able to match only one language and one CSP.

The table below summarizes the currently supported CSPs and languages
</br>
<p align="center">
<img src="images/supported-lang-csp.png" width="30%">
</p>
</br>
The table below summarizes the currently supported CSPs and languages:

| Language/CSP | GCP | AWS |
|-----------------|-----|-----|
| Python | Yes | Yes |
| JavaScript | Yes | Yes |
| Go | No | Yes |
| TypeScript | No | Yes |


### Enhancing Reviews with PoiEx
Non-IaC related features were added to support manual reviews in different ways. Such functionalities are unrelated to the cloud infrastructure analysis and they are usable in any code review activity.<br>
Expand Down

0 comments on commit e481015

Please sign in to comment.