Event

Bay Area Bazel Meet-up

Date
September 12, 2024
Time
5:30 - 8:00 PM PT
Event Type
In person
Location
Endor Labs HQ
658 Hight St. Palo Alto, CA

Join us for the Bay Area Bazel Meet-up for a technical deep dive into enhancing your scanning process and optimizing your development workflow.

Scalable SCA with Monorepo and Bazel

Alexandre Wilhelm, Founding Engineer, Endor Labs

Scanning a monorepo with traditional SCA tools is often inefficient, resulting in hours of scanning and numerous irrelevant results due to the lack of incremental scanning capabilities.

Endor Labs addresses this issue by offering native support for Bazel and monorepo. In this session, Alexandre will discuss the benefits of using Endor Labs as your SCA tool with Bazel, focusing on:  
- Utilizing Bazel's native query for analysis
- Improving data accuracy compared to traditional SCA tools with reachability
- Performing incremental scans of your monorepo with Bazel and Endor Labs

Custom BUILD File Generation with Starlark Gazelle Extensions

Alex Eagle, Co-founder & CEO, Aspect

Gazelle started out as a generator for Go targets in Bazel's BUILD files. It has grown to cover more languages, but the API for authoring extensions is in Go only, and requires end-users to recompile a go_binary in order to run the tool.

Aspect's CLI has a built-in Gazelle generator behind the 'configure' verb. In this talk I present a new capability of `aspect configure`: the ability to author BUILD file generation logic in Starlark, the same language used to write Bazel extensions such as rules and macros. I'll show some examples and explain how this benefits devinfra teams and product developers.

Want to stay in the loop?

Sign up for our newsletter.

Claude Fable 5: Mythos-grade hype, record cheating, and a few hall-of-fame entries
Average results with 59.8% on functional solves and just 19.0% on security solves
Read more
Recall, not reasoning: how AI coding agents cheat security benchmarks
Recall, not reasoning: how AI coding agents cheat security benchmarks
Read more
Endor Labs + Cursor: Building the security foundation for agentic coding
Endor Labs + Cursor: Building the security foundation for agentic coding
Read more
Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
Cut container vulnerability noise by up to 90% with full-stack reachability analysis spanning application and container image OS layers.
Read more
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
MCP servers inherit classical vulnerabilities like command injection, path traversal, and SSRF. Here's why LLMs and MCP deserve the same security practices as traditional applications.
Read more
How Fake Font Packages Abused npm as a CDN
101 packages disguised as font files distributed 34 TiB of data via npm's infrastructure—with a total of 4.3 PiB transferred via downloads.
Read more