DEV Community

CopperSunDev profile picture

CopperSunDev

Engineering notes on AI code safety, static analysis, and what scanners can and can't catch.

Location Redwood City Joined Joined on  Personal website https://coppersun.dev/ github website
Tuning .brassignore: Suppressing a False Positive in Three Steps
coppersundev profile

Tuning .brassignore: Suppressing a False Positive in Three Steps

#opensource #ai #engineering
Comments
5 min read
From HIGH to Clean: Removing a Hardcoded HMAC Key in AI-Generated Python
coppersundev profile

From HIGH to Clean: Removing a Hardcoded HMAC Key in AI-Generated Python

#security #ai #opensource
Comments
5 min read
From SQL Injection to Clean: Fixing a B608 Finding in AI-Generated Flask Code
coppersundev profile

From SQL Injection to Clean: Fixing a B608 Finding in AI-Generated Flask Code

#security #ai #opensource
Comments
6 min read
What Static Analysis Cannot See: A Complete Map of the Limit
coppersundev profile

What Static Analysis Cannot See: A Complete Map of the Limit

#opensource #ai #security
Comments
10 min read
How to Run Your First BrassCoders Scan on AI-Generated Python
coppersundev profile

How to Run Your First BrassCoders Scan on AI-Generated Python

#opensource #engineering
Comments
2 min read
What's the Cost of a SQL Injection in AI-Generated Code?
coppersundev profile

What's the Cost of a SQL Injection in AI-Generated Code?

#security #engineering
Comments
2 min read
Can BrassCoders Catch Race Conditions in Async Python?
coppersundev profile

Can BrassCoders Catch Race Conditions in Async Python?

#engineering #ai
Comments
2 min read
Does BrassCoders Scan Node.js and TypeScript Code?
coppersundev profile

Does BrassCoders Scan Node.js and TypeScript Code?

#opensource #engineering
Comments
2 min read
AI Coding Assistant Vendor Risk: What Your Security Team Should Ask
coppersundev profile

AI Coding Assistant Vendor Risk: What Your Security Team Should Ask

#security #compliance #engineering
Comments
6 min read
The Trust Boundary Problem in AI-Generated Code
coppersundev profile

The Trust Boundary Problem in AI-Generated Code

#security #ai #engineering
Comments
5 min read
Business Logic Bugs Static Analysis Will Never Catch
coppersundev profile

Business Logic Bugs Static Analysis Will Never Catch

#security #ai #engineering
Comments
5 min read
What to Ask a Static Analysis Vendor When Your Team Uses AI Code
coppersundev profile

What to Ask a Static Analysis Vendor When Your Team Uses AI Code

#security #ai #engineering
Comments
4 min read
The Security Manager's Brief on AI-Generated Code Risk
coppersundev profile

The Security Manager's Brief on AI-Generated Code Risk

#security #ai #engineering
Comments
3 min read
Quantifying AI Code Risk: A Framework for Engineering Leaders
coppersundev profile

Quantifying AI Code Risk: A Framework for Engineering Leaders

#ai #security #engineering
Comments
4 min read
Building the Business Case for AI Code Scanning
coppersundev profile

Building the Business Case for AI Code Scanning

#ai #security #engineering
Comments
3 min read
What Python Versions Does BrassCoders Support?
coppersundev profile

What Python Versions Does BrassCoders Support?

#opensource #engineering
Comments
2 min read
What's the Difference Between .brassignore and .gitignore?
coppersundev profile

What's the Difference Between .brassignore and .gitignore?

#opensource #engineering
Comments
2 min read
What Does a BrassCoders Scan Output Look Like?
coppersundev profile

What Does a BrassCoders Scan Output Look Like?

#opensource #ai
Comments
2 min read
How Long Does a BrassCoders Scan Take?
coppersundev profile

How Long Does a BrassCoders Scan Take?

#opensource #engineering
Comments
2 min read
How Do I Read .brass/ai_instructions.yaml?
coppersundev profile

How Do I Read .brass/ai_instructions.yaml?

#opensource #ai
Comments
2 min read
Does BrassCoders Work With pyproject.toml?
coppersundev profile

Does BrassCoders Work With pyproject.toml?

#opensource #engineering
Comments
2 min read
Does BrassCoders Work With Django REST Framework?
coppersundev profile

Does BrassCoders Work With Django REST Framework?

#opensource #security
Comments
2 min read
Can I Run BrassCoders Offline? Yes — Here's How
coppersundev profile

Can I Run BrassCoders Offline? Yes — Here's How

#opensource #engineering
Comments
2 min read
What AI Coding Agents Leave Behind in Production
coppersundev profile

What AI Coding Agents Leave Behind in Production

#security #ai #engineering
Comments
4 min read
Your README Is an Attack Surface for AI Agents
coppersundev profile

Your README Is an Attack Surface for AI Agents

#security #ai #engineering
Comments
4 min read
Pydantic v2 Validation Bugs AI Assistants Write
coppersundev profile

Pydantic v2 Validation Bugs AI Assistants Write

#security #ai #engineering
Comments
4 min read
OWASP Agentic Top 10 for Python Developers
coppersundev profile

OWASP Agentic Top 10 for Python Developers

#security #ai #engineering
Comments
5 min read
MCP Tool Poisoning: What Static Scanners Miss
coppersundev profile

MCP Tool Poisoning: What Static Scanners Miss

#security #ai #engineering
Comments
4 min read
Coverage Theater: AI Tests That Don't Test Anything
coppersundev profile

Coverage Theater: AI Tests That Don't Test Anything

#engineering #ai #opensource
Comments
4 min read
AI Type Hints That Fool mypy and Break at Runtime
coppersundev profile

AI Type Hints That Fool mypy and Break at Runtime

#engineering #ai #opensource
Comments
4 min read
AI-Generated requirements.txt and Vulnerable Packages
coppersundev profile

AI-Generated requirements.txt and Vulnerable Packages

#security #ai #engineering
Comments
4 min read
AI-Generated Migrations: The Data Loss Pattern
coppersundev profile

AI-Generated Migrations: The Data Loss Pattern

#engineering #ai #opensource
Comments
4 min read
Why AI Code Breaks in Production: The Happy-Path Bias
coppersundev profile

Why AI Code Breaks in Production: The Happy-Path Bias

#engineering #ai #opensource
Comments
4 min read
Ruff Won't Catch Security Bugs Unless You Ask It To
coppersundev profile

Ruff Won't Catch Security Bugs Unless You Ask It To

#comparison #security #opensource
Comments
5 min read
AI Code Security Scanners: Who Fills Which Role
coppersundev profile

AI Code Security Scanners: Who Fills Which Role

#comparison #security #ai
Comments
10 min read
What AI Recommends to Catch AI's Own Bugs
coppersundev profile

What AI Recommends to Catch AI's Own Bugs

#ai #engineering #benchmarking
Comments
3 min read
The Authorization Bug No Scanner Understands
coppersundev profile

The Authorization Bug No Scanner Understands

#security #ai
Comments
4 min read
Every AI Code Review Blind Spot Is the Same One
coppersundev profile

Every AI Code Review Blind Spot Is the Same One

#ai #security #engineering
Comments
4 min read
Brass-SEO's Case Study on Our Boundary Content
coppersundev profile

Brass-SEO's Case Study on Our Boundary Content

#engineering
Comments
1 min read
The Slow Code No Scanner Can Flag
coppersundev profile

The Slow Code No Scanner Can Flag

#engineering #ai #benchmarking
Comments
3 min read
Security Misconfiguration Is a Runtime Fact
coppersundev profile

Security Misconfiguration Is a Runtime Fact

#security #ai #engineering
Comments
3 min read
What BrassCoders Sends to Its Servers (And What It Doesn't)
coppersundev profile

What BrassCoders Sends to Its Servers (And What It Doesn't)

#privacy #opensource #engineering
Comments
7 min read
How to Triage a 500-Line AI Pull Request in 10 Minutes
coppersundev profile

How to Triage a 500-Line AI Pull Request in 10 Minutes

#ai #engineering #opensource
Comments
7 min read
Why Claude Code Emits Eight Findings When One Matters
coppersundev profile

Why Claude Code Emits Eight Findings When One Matters

#claudecode #ai #noisereduction #staticanalysis
Comments
4 min read
Copilot Does X. BrassCoders Does Y.
coppersundev profile

Copilot Does X. BrassCoders Does Y.

#comparison #ai
Comments
5 min read
BrassCoders Is Now Open Source on GitHub
coppersundev profile

BrassCoders Is Now Open Source on GitHub

#launch #opensource #engineering
Comments
5 min read
Your SAST Dashboard Has 1,500 Findings
coppersundev profile

Your SAST Dashboard Has 1,500 Findings

#security #engineering
Comments
6 min read
The Regression That Shouldn't Have Shipped
coppersundev profile

The Regression That Shouldn't Have Shipped

#security #engineering
Comments
5 min read
BrassCoders Paid is live: $12/dev/month for AI-powered noise reduction
coppersundev profile

BrassCoders Paid is live: $12/dev/month for AI-powered noise reduction

#launch #paidtier #ai
Comments
3 min read
Pre-Commit Hook That Stops AI-Coder Bugs
coppersundev profile

Pre-Commit Hook That Stops AI-Coder Bugs

#opensource #security #ai
Comments
6 min read
Semgrep vs. BrassCoders: Choose the Right Tool
coppersundev profile

Semgrep vs. BrassCoders: Choose the Right Tool

#comparison #security #benchmarking
Comments
5 min read
Vibe Coding Without the Regrets: The Safety Net
coppersundev profile

Vibe Coding Without the Regrets: The Safety Net

#opensource #ai #security
Comments
5 min read
HIPAA and SOC 2 Teams Can't Use Cloud Code Review
coppersundev profile

HIPAA and SOC 2 Teams Can't Use Cloud Code Review

#security #privacy #opensource
Comments
6 min read
An AI Reviewer Is Not a Pre-Merge Gate
coppersundev profile

An AI Reviewer Is Not a Pre-Merge Gate

#ai #engineering
Comments
4 min read
Triaging Static Analysis Findings: A Practical Methodology
coppersundev profile

Triaging Static Analysis Findings: A Practical Methodology

#workflow #triage #staticanalysis
Comments
6 min read
Tuning BrassCoders with .brassignore: From 1500 Findings to 300
coppersundev profile

Tuning BrassCoders with .brassignore: From 1500 Findings to 300

#configuration #noisereduction #brassignore
Comments
5 min read
Why Bandit Catches 50% of AI-Coder Bugs (and Which Half)
coppersundev profile

Why Bandit Catches 50% of AI-Coder Bugs (and Which Half)

#benchmarking #comparison #opensource
Comments
3 min read
BrassCoders vs CodeRabbit: Different Jobs
coppersundev profile

BrassCoders vs CodeRabbit: Different Jobs

#comparison #ai #opensource
Comments
4 min read
Using BrassCoders for SOC 2 Audit Evidence: What the .brass/ Artifacts Prove
coppersundev profile

Using BrassCoders for SOC 2 Audit Evidence: What the .brass/ Artifacts Prove

#soc2 #compliance #security
Comments
5 min read
SonarQube vs BrassCoders: Different Jobs, Different Layers
coppersundev profile

SonarQube vs BrassCoders: Different Jobs, Different Layers

#comparison #sonarqube #cicd
Comments
4 min read
loading...