Github, Continuous Integration, Open Source.
about the use of a system call in your Java codebase, performed via “Runtime.getRuntime().exec(<command>)”. You can write a plugin containing a regex to match that pattern — Runtime\.getRuntime\(\)\.exec\(, and logic to create a GitHub issue and email the security team. If a developer commits code