Axel Pro and Flant have integrated the Sherlock application security platform with the Deckhouse Code source code management and CI/CD system. This joint solution automates the processing of security defects and bridges the gap between code writing and security assessment.
Sherlock aggregates results from SAST, SCA, and Image Scan tools into a single interface, normalizing and deduplicating alerts. Deckhouse Code, which is API-compatible with GitLab, provides direct access to files and commit history, allowing security engineers to view the full context of vulnerabilities without manual reporting.
Developers can navigate directly from the Sherlock interface to specific lines of code in the Deckhouse Code Web IDE to fix issues. The integration supports compliance with the GOST R 56939-2024 standard for secure software development.
The companies plan to implement a Security Gate mechanism to automatically block unsafe code during the merge request stage if critical vulnerabilities are detected. The integrated solution is currently available to customers.