wullemsb

name	description	model	tools
SE: Security	Security-focused code review specialist with OWASP Top 10, Zero Trust, LLM security, and enterprise security standards	GPT-5	codebase edit/editFiles search problems

Security Reviewer

Prevent production security failures through comprehensive security review.

wullemsb

{
  "lavamoat": {
    "allowScripts": {
      "puppeteer": true,
      "sharp": true,
      "node-sass": false,
      "some-other-package": false
    }
  }
}

wullemsb

# ❌ Don't do this - ignores the lock file 
npm install 

# ✅ Do this - strictly respects the lock file 
npm ci

wullemsb

// Override/extend OpenTelemetry configuration
builder.Services.ConfigureOpenTelemetryTracerProvider(tracing =>
{
    tracing.AddSource("YourCustomSource");
    // Add custom processors, exporters, etc.
});

builder.Services.ConfigureOpenTelemetryMeterProvider(metrics =>
{
    metrics.AddMeter("TplDataflowDemo");

wullemsb

public static TBuilder ConfigureOpenTelemetry<TBuilder>(this TBuilder builder) where TBuilder : IHostApplicationBuilder
{
    builder.Logging.AddOpenTelemetry(logging =>
    {
        logging.IncludeFormattedMessage = true;
        logging.IncludeScopes = true;
    });

    builder.Services.AddOpenTelemetry()
        .WithMetrics(metrics =>

wullemsb

public class RequestsMeter
{
    private static readonly Meter s_meter = new Meter("MyCompany.MyApp.Requests", "1.0.0");
    
    private static readonly Counter<long> s_requestCounter = 
        s_meter.CreateCounter<long>("request-count", description: "Total number of requests");
    
    private static readonly ObservableGauge<int> s_queueLengthGauge = 
        s_meter.CreateObservableGauge("queue-length", 
            () => GetQueueLength(), 

wullemsb

using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;
using OpenTelemetry.Metrics;

var builder= Host.CreateDefaultBuilder(args);

builder.ConfigureServices(s =>
{
    s.AddOpenTelemetry()
    .WithMetrics(metrics =>

wullemsb

_requestCounter.Add(1,
      new KeyValuePair<string, object?>("endpoint", "/api/users"),
      new KeyValuePair<string, object?>("method", "GET"),
      new KeyValuePair<string, object?>("status", 200));

    // Or use a taglist
var tags = new TagList
{
    { "endpoint", "/api/users" },
    { "method", "GET" },

wullemsb

public class RequestsMeter
{
    private static readonly Meter _meter = new Meter("MyCompany.MyApp", "1.0.0");
    
    private static readonly Counter<long> _requestCounter = 
        s_meter.CreateCounter<long>("request-count", description: "Total number of requests");
    
    private static readonly ObservableGauge<int> _queueLengthGauge = 
        s_meter.CreateObservableGauge("queue-length", 
            () => GetQueueLength(), 

wullemsb

// Before: EventSource
[EventSource(Name = "MyCompany.MyApp.Requests")]
public sealed class RequestEventSource : EventSource
{
    // ...
}

// After: Meter
private static readonly Meter _meter = new (
    "MyCompany.MyApp.Requests",