all tags

#sast

1 post filed under “sast

How I Built a Security Scanner That Actually Finds Bugs

Combining Semgrep, CodeQL, SonarQube, and Snyk gets you 44.7% vulnerability detection. That means they miss more bugs than they find.