Loading
Topic
static analysis
10 posts about static analysis by 7 contributors.
Know static analysis? Share what you know with developers who are learning it.
+ Follow static analysisBe the first to follow this
- Articles
- 10
- Contributors
- 7
Articles about static analysis
- Article · Cyber Security
CodeQL 2.27.2 Brings Analysis Updates for C++, Go, Rust, and JavaScript
Learn how CodeQL 2.27.2 affects security analysis for C++, Go, Rust, and JavaScript, and how to validate updates in GitHub code-scanning workflows.
- Article · Security
CodeQL 2.27.2 Adds C++ Regex Support and Improves Go, Rust, and JavaScript Analysis
CodeQL 2.27.2 adds C++ regex parsing and improves security analysis, data-flow modeling, and framework support for Go, Rust, JavaScript, TypeScript, and C#.
- Article · Security
Debugging SQL Injection Paths With CodeQL's New Comdb2 Models
Learn how CodeQL 2.27.2 models Comdb2 C API statement functions as SQL injection sinks, improving detection of unsafe query construction in C and C++ applications.
- Article · Cyber Security
GitHub Code Scanning Now Skips Inactive Repositories
Learn how GitHub code scanning can skip inactive repositories, the resource benefits, and the security controls teams need for inactive but still deployed code.
- Article · AI
Can AI Code Analysis Replace Static Analysis?
Compare AI code analysis and SAST to understand their strengths, limitations, and role in enterprise software assurance, AI-generated code security, and DevSecOps.
- Article · Vibe Coding
Static Analysis vs Dynamic Analysis vs AI Code Analysis
Compare static, dynamic, and AI code analysis and learn how enterprises combine them for security, software assurance, and governance.
- Article · Cyber Security
CodeQL 2.26.3: Testing GitHub Actions Security Detection in CI/CD
Learn how to test CodeQL 2.26.3 security detection for GitHub Actions workflows and improve vulnerability detection in CI/CD pipelines.
- Article · Software Architecture/Engineering
Building AI-Assisted Architecture Gates for Large .NET Repositories
Build AI-assisted architecture gates for large .NET repositories that detect architectural violations while keeping deterministic rules, dependency constraints, and governance as the source of truth.
- Article · Angular
Intelligent Code Review Engine (Scan Angular/.NET Projects for Architecture Violations)
Automate code reviews for Angular/.NET! Enforce architecture, detect violations, suggest fixes, and integrate with CI. Reduce technical debt and boost developer velocity.
- Article · Software Testing
Security Testing Automation: Integrating SAST and DAST in Pipelines
Security testing automation is essential in modern DevSecOps practices. Integrating Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into CI/CD pipelines ensures early detection and remediation of vulnerabilities.
