@@ -233,16 +233,9 @@ Support for JetBrains is [coming soon](https://github.com/stacklok/codegate/issu
233
233
234
234
## Verify configuration
235
235
236
- To verify that CodeGate is receiving Copilot traffic as expected, open the
237
- Copilot chat and type `What do you know about CodeGate?`. You should receive a
238
- response that starts like this:
239
-
240
- ```plain title="Copilot chat"
241
- CodeGate is a security-focused AI assistant designed to help with software
242
- security, package analysis, and providing guidance on secure coding practices.
243
-
244
- ...
245
- ```
236
+ To verify that you' ve successfully connected Copilot to CodeGate, open the
237
+ Copilot chat and type ` codegate-version` . You should receive a response like
238
+ " CodeGate version 0.1.7" .
246
239
247
240
Try asking CodeGate about a known malicious Python package:
248
241
@@ -254,17 +247,15 @@ CodeGate responds with a warning and a link to the Stacklok Insight report about
254
247
this package:
255
248
256
249
` ` ` plain title=" Copilot chat"
257
- Warning: CodeGate detected one or more malicious or archived packages.
258
-
259
- Package: https://insight.stacklok.com/pypi/invokehttp
250
+ Warning: CodeGate detected one or more malicious, deprecated or archived packages.
260
251
261
- CodeGate Security Analysis
252
+ • invokehttp: https://www.insight.stacklok.com/report/pypi/invokehttp
262
253
263
- I cannot provide examples using the invokehttp package as it has been identified
264
- as malicious. Using this package could compromise your system' s security.
254
+ The ` invokehttp` package from PyPI has been identified as malicious and should
255
+ not be used. Please avoid using this package and consider using a trusted
256
+ alternative such as ` requests` for making HTTP requests in Python.
265
257
266
- Instead, I recommend using well-established, secure alternatives for HTTP
267
- requests in Python:
258
+ Here is an example of how to use the ` requests` package:
268
259
269
260
...
270
261
` ` `
0 commit comments