Sast - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

hamelin123

Aug 19

The same detector scores 45.5 or 100 on the OWASP Benchmark. Both are 'true.'

#security #sast #testing #opensource

3 min read

hamelin123

Aug 19

There are 755 static-analysis tools. Only 42 are open-source security scanners.

#security #sast #opensource #devops

3 min read

Leo

Aug 10

CodeQL 2.26.2 trims what counts as safe: fresh alerts incoming

#codeql #githubactions #sast #supplychain

3 min read

mattybellx

Jul 8

I Built a 100% Offline SAST Scanner That Finds What Semgrep and CodeQL Miss

#python #security #sast #opensource

1 min read

mattybellx

Jul 2

Why Your SAST Scanner Misses 86% of Real Vulnerabilities

#security #python #devops #sast

7 min read

Jun 30

Applying SAST to Any Application with CodeQL

#security #sast #github #codeql

3 min read

Stefan

Jun 29

DAST false negatives vs SAST false positives: a real case

#security #appsec #sast #dast

10 min read

Jun 29

SAST vs SCA: why your CI pipeline needs both

#sast #security #devsecops #webdev

4 min read

Lincoln Zocateli

Jun 18

CI/CD Seguro: Dependabot, SAST e DAST no GitHub

#portuguese #cicd #dependabot #sast

10 min read

Jun 12

GitHub Advanced Security vs Kolega: why it is already in our repo is not the same as we are covered

#security #devops #sast #github

2 min read

Mauricio Choqueña Choque

Jul 5

Applying SAST Tools to Real Applications — A Hands-On Look at Bandit

#security #python #sast #devsecops

4 min read

Jun 11

Semgrep vs Kolega: a great floor, but a floor is not a finish line

#security #devops #sast #opensource

2 min read

Jun 10

Aikido vs Kolega: the all-in-one platform is wide, but wide is not deep

#security #devops #aspm #sast

2 min read

Jun 9

Snyk vs Kolega: why pattern matching has a ceiling, and what sits above it

#security #devops #sast #programming

2 min read

Jun 9

We benchmarked 24 SAST tools on ~700 real vulnerabilities. The 3 best known ones came last

#security #sast #devops #devsecops

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.