Why do you need access to my source code?

​

Reshift is a static code analysis tool that operates on both the source code and the binaries. reshift primarily needs continuous access to the source code for the following reasons:

• To display accurate diagnostic information to the user as they triage a vulnerability. Information such as line numbers for the vulnerabilities found, Git blame and branch information.

• To be able to integrate security issues found into the Pull request workflow

If you have any more questions, please email us at [email protected]!