Solo: Run security audit tools on code base

[conorpp]

I don't have much experience with this but it would be nice to run some static/dynamic analysis security tools on the code base.

[0x0ece]

Valgrind would also be a good one to run, primarily to avoid mem leaks.

[pjz]

I suggest setting up CI to do this, so they'll get run with every change.

[MattMattV]

Also an audit performed by humans may be relevant to this project (:

[jacobalberty]

More hardware than software related but when I get my tokens in I'll be x-raying them. Would you be interested in copies of the x-rays?

[MattMattV]

I'll appreciate that ! (Even if I will be unable to see anything "wrong")

Thanks for the answer !

Le sam. 6 oct. 2018 à 20:16, Jacob Alberty [e-mail] a
écrit :

More hardware than software related but when I get my tokens in I'll be
x-raying them. Would you be interested in copies of the x-rays?

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/SoloKeysSec/solo/issues/3#issuecomment-427595341, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AGZ3Lj_kpn9ggto6bKtFwNlLJLC8h5yrks5uiPNqgaJpZM4WoWto
.

[conorpp]

@jacobalberty Hell yeah!