Social Media Ideas for Static Analysis

Static Analysis

Static Analysis for the Uninitialized

Originally appeared on Tenderlove Making.I really enjoy learning new things in my free time. Lately I’ve been studying this book on Static Program Analysis. The book is very good,...

508: The Wonders of Static Analysis

Originally appeared on The Bike Shed. In this week’s episode of The Bike Shed, Aji and Joël dive into the distrust around the phrase ‘programmer discipline’, why you cannot...

Free Rails Architecture Checkup for coding agents

A repo-aware prompt for Codex, Claude Code, Cursor, and similar tools that audits an existing Rails application for conflicting architectural precedent, missing decisions, structur...

The Halting Problem’s Quiet Relevance to Static Analysis Tools

Why your linter can never be complete, and why that is not a bug in the tool but a theorem about computation itself. Every developer has had the same two-part argument with a linte...

The Halting Problem’s Practical Shadow

Why static analyzers, linters, and even the Java compiler’s own exhaustiveness checking all live under the same hard ceiling. Every developer meets the halting problem eventually,...

Introducing Rubydex linter: structural checks for Ruby projects

Originally appeared on Rails at Scale. What is Rubydex linter Rubydex is a static analysis toolkit for Ruby. My teammate Vini introduced it in more detail in One engine, many too...

Проверка исходников VSCode

Теперь можно говорить без всяких прикрас: мы выпустили анализатор для языков JavaScript и TypeScript. А значит, это повод испытать его в полевых условиях и посмотреть, что он найдё...

Как внедрить статический анализ кода по ГОСТ Р 71207—2024

Как шаг за шагом организовать процесс внедрения статического анализа по ГОСТ Р 71207—2024: рассказываем простыми словами с отсылками на соответствующие пункты стандарта. Статья буд...

The Bytecode Verifier’s Hidden Contract

Every class file passes a formal dataflow analysis before the JIT ever sees it, and that quiet checkpoint is what actually makes the JVM’s sandbox model possible. Ask most Java dev...

Your Application Has an Unindexed Attack Surface. Do You Know What’s in It?

Security teams usually describe an application through the assets they know about. This includes the production domain, documented APIs, the services currently in use, and the repo...

I Built a Security Linter for AI-Generated Code, Here Is What I Found in a Real Production Codebase

AI coding tools write fast. GitHub Copilot. Cursor. ChatGPT. Claude. Gemini. Every single one of them is now inside production codebases at companies worldwide. And every single...

AI Tools for Security Vulnerability Detection: 2026 Guide

Originally published at nlocoding.com 81%of critical vulnerabilities exploited in 2025 had known fixes available for over 60 days. (CISA, 2026) Software doesn’t get hacked bec...

Crystal: Static Typing Bolted Onto Ruby Syntax

What gets preserved and what gets lost when you compile a language that was designed, from its first line of syntax, to be dynamic. Open a Crystal file next to a Ruby file and for...

PyCharm

We’ve all been there: you join a new project, and the first thing you ask for is the architecture diagram. You’re handed a diagram that looks great, but after a week of debugging,...

Codebase Exploration with AI [SUBSCRIBER]

<p>Explore an unfamiliar legacy iOS codebase with AI without treating its answers as authoritative. You will verify a codebase map and technical-debt findings against the sou...

9 Best IAST Tools Compared (2026): Features & Pricing

Contrast Security remains the dedicated IAST anchor, Black Duck’s Seeker the QA-leverage specialist, and Dynatrace/Datadog prove the category’s future is observability-delivered. O...

Antares: a Security Analyst That Never Leaves Your Laptop – Security Loop Series, Part 1

A CWE advisory names your dependency, but not where the bug lives. See how Cisco's Antares-1B localizes it offline on a laptop, with auditable traces and honest benchmark numbers.

Best SAST Tools for Python and Java Automation Backends

The movement of a robot arm occurs after a signal is sent out by the controller. But there is another world beyond the controller. There are Python services that queue up tasks. Th...

Decoding the “Black Box”: Evaluating Agent Tool Chains in Production

One of the most interesting parts of my role as a cloud solution architect is working directly with customers as they move from experimentation to production. The conversations cha...

Secure Coding Practices Using AI Tools

Secure Coding Practices Using AI Tools Anonymous (not verified) Wed, 10/14/2026 - 17:46 SDC315 315 SDC SDC315 Secure Coding Practices Using AI...