Vigilance vs GitHub Advanced Security
GitHub Advanced Security. Warns you when a part you depend on has a known bug, when a password gets committed, and when its scanner finds a mistake in your code.
Vigilance. Compares two versions of software on disk and says what the new one can suddenly do.
Side by side
| Question | GitHub Advanced Security | Vigilance |
|---|---|---|
| Warns about a part with a known bug | Yes | No |
| Finds a password committed to a repository | Yes | No |
| Finds a mistake in your own code | Yes | No |
| Covers what is on the machine, not what is in the repository | No | Yes |
| Spots a new file that runs itself during an install | No | Yes |
| Covers software you did not write | No | Yes |
Which one do you need?
Use both. GitHub covers the code you write. Vigilance covers the files that land on the machine.
Try it on your own software.
Show it the version you run today and the one you are about to install.