Social Media Ideas for Software Composition Analysis

Композиционный анализ проектов на C++

Композиционный анализ (Software Composition Analysis, SCA) – это практика автоматического выявления и отслеживания внешних зависимостей проекта с целью мониторинга их известных уяз...

An Ingredient List Doesn't Stop the Worm: What SBOMs Can and Can't Do

On March 28, 2024, a Microsoft engineer named Andres Freund noticed something almost nobody would have bothered chasing: SSH logins on a system he was benchmarking were taking 500...

archcheck — на страже архитектуры C++

Открытый чекер архитектуры C++ для CI: циклы, копипаст, распухшие заголовки — в каждом PR. Плюс замер на 484 500 коммитов в поисках архитектурного дрейфа Почему ревью это пропустил...

There are 755 static-analysis tools. Only 42 are open-source security scanners.

If you run a linter on your code today, you have a lot of choices. If you want one that actually looks for security bugs — and is open source — you have far fewer than the ecosyste...

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

Toronto, Canada, July 6th, 2026, CyberNewswire Most software composition analysis tools read what developers declare. Insignary Clarity’s patented binary-first platform analyzes wh...

AI SAST: Code Security for the Agentic SDLC

Endor Labs has launched an AI-powered Static Application Security Testing (SAST) tool for C code that detects more vulnerabilities than traditional scanners without requiring a sof...

Black Duck Extends Scope and Reach of Code Scanning Tool

Black Duck has updated its Coverity static analysis code scanning tool to provide deeper integrations with artificial intelligence (AI) tools along with updates to its user interfa...

Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion

AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations shoul...

Ваш AI-агент не понимает код. Он просто очень уверенно угадывает — поэтому мы создали SLICER

AI-агенты отлично решают локальные задачи, но часто теряют связи между частями большой кодовой базы. Из-за этого изменение одной функции может незаметно сломать frontend, backend-р...

Code Review From the Terminal and CI, No MCP Client Required

A month ago I shipped aicraft-code-review, an MCP server that reviews code locally. This week I added a CLI mode — because not everyone wants to wire up an MCP client just to che...

Static Application Security Testing (SAST)

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

Toronto, Canada, 6th July 2026, CyberNewswire

OpenAI Open Sources Codex Security CLI for the Merge Path

OpenAI has released its Codex Security command-line interface and software development kit as open source software under the Apache 2.0 license, providing a new way to bring its AI...

Anthropic Releases Claude Security Plugin for Claude Code in Beta: A Multi-Agent Vulnerability Scanner That Runs in Your...

Anthropic has released the Claude Security plugin for Claude Code in beta. The plugin runs a multi-agent vulnerability scan of a repository from inside an existing Claude Code sess...

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain security" meant one question: what's in your code? Which...

Diagrams from Java

Understanding the structure of a Java application becomes more challenging as the codebase grows. Generating diagrams from source code helps developers visualize important componen...

Why AI Struggles with Multi-Repository Projects and How Code Studio Helps

Building features across multiple repositories? Learn how Code Studio helps AI understand your architecture and reduce integration issues.

9 Best Agentic Coding CLI Tools for 2026

Compare the 9 best agentic coding CLI tools for 2026 on models, MCP support, open-source licensing, and CI fit, from Claude Code and Gemini CLI to Aider.

Security, Trust & Governance: Securing Software That Increasingly Writes Itself: SD Times 100

Part of the SD Times 100 2026 series. See the full SD Times 100 2026 list for every category and honoree. Application security has spent years maturing around a relatively stable a...