security checkup in source control software
Mads Rasmussen <[email protected]>
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
A friend of mine mentioned that a time ago he worked at a company where they used CVS for source control. They implemented routines to scan code when cheking in. That way if a developer checked in code that used banned routines such as gets, strcpy etc. he would receive an email as would his manager :-) A pitty that this behaviour isn't possible with comercial tools such as PVCS or Microsofts VSS. Not to my knowledge anyway Mads