Simplified onboarding for deepsec
The deepsec open-source security review tool now offers one-command setup and improved initialization that automatically creates the isolated workspace, configures model access, generates codebase analysis, and runs initial scans. Setup is checkpointed at each step so interrupted runs can resume from where they left off.
, the open-source security review harness from Vercel, now lets you set up a repository and run its first security review with a single command.deepsec
The command now automates the standard setup process:init
Setup is checkpointed after each step. If a run stops, whether from closing the process, a failed step, or a hit cost or duration limit, re-running resumes from the last completed step.init
Run to start your first scan, or read the to learn more.npx deepsec initdocs
creates the isolated workspace, the only thing added to your repository, and installs its dependencies
.deepsec/configures model access, through or your own provider keysVercel AI Gateway
generates a description of the codebase and its attack surface that every later review depends on
runs a pattern scan, generating extra scan patterns where the built-in set leaves coverage gaps
starts the AI review of the flagged files
Source: original entry ↗