Vibecraft overview
Vibecraft is a service where you can create and publish websites and web applications by chatting with AI in a natural language without any coding.
Describe in the chat what you want to create, and Vibecraft will code a full-blown app you can edit in SourceCraft – both frontend and backend – show you a preview, and publish the app to Yandex Cloud.
The service shortens your path from an idea to an MVP or even a full product: you need no sophisticated tools or designer/developer skills. For example, you can use Vibecraft to create and publish a landing page, an online course website, a finance accounting app, a sports and health tracker, a game, or even a CRM system.
Warning
This feature is currently at the Preview stage and is not covered by an SLA.
We charge fees for using SourceCraft and Yandex Cloud resources.
You can access the service on request.
Technical features
The service operates automatically and uses the following SourceCraft and Yandex Cloud components:
- Code Assistant LLM ensemble used to engineer the application concept, write and test code.
- SourceCraft repository used to store code.
- SourceCraft CI/CD used to preview the application and automate deployment.
- Yandex Container Registry registry used to store Docker images containing the application.
- Yandex Serverless Containers container used to run the application.
- Yandex Managed Service for YDB serverless database used to store the application status.
- Yandex Lockbox secret used to store sensitive data.
Yandex Cloud resources are manged from the SourceCraft repository via a secure service connection.
Security
All projects being stored in SourceCraft, you can use the following security mechanisms for them:
- Secret scanning: Checking commits for sensitive data contained in the code, e.g., API keys, tokens, certificates, and other secrets.
- Software composition analysis: Identifying dependencies used in software development and known vulnerabilities they may contain.
- Static application security testing analyzes source code to identify vulnerabilities, errors, and security standard violations without executing the actual code.
- AI-powered vulnerability analysis and prioritization: AI suggestions for detected vulnerabilities, with risk and criticality assessment, false positive probability analysis, and possible fixes. Triage is available for static code analysis issues, and prioritization is available for both static code analysis and secret scanning issues.
- Scan history is a dedicated section presenting the history of repository scans performed to detect secrets and analyze dependencies.
For more information, see Security in SourceCraft.