» Tag
static-analysis
25 postshallint: An Open-Source Linter Built to Catch AI-Generated Security Bugs
hallint is a free open-source linter that detects security bugs AI assistants like Copilot and ChatGPT commonly write, from SQL injection to hardcoded secrets.
Go 1.26's //go:fix inline: source-level inlining for API migrations
Go 1.26 introduces //go:fix inline, a source-level inliner in go fix that automates safe API migrations and deprecated function removal.
Why CrossUI Studio Reads React Code Statically, Not at Runtime
CrossUI Studio uses static AST parsing instead of runtime introspection, keeping its React editor usable even when components crash.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comLoop Engineering: Fixing a Guardrail That Fired Wrong
How to fix a misfiring guardrail check in an agent loop without deleting it—why weakening checks silently disables real catches.
CodeGraph Turns Repos into Queryable Graphs to Predict Breakage
CodeGraph converts GitHub repos into a Neo4j knowledge graph, using GraphRAG and a blast-radius score to predict code change impact.
Using AI to Manage Static Analysis Alerts Effectively
AI should maintain explicit and auditable authority over hiding security evidence in static analysis alerts.
CodeClone 2.1: why your AI agent's diff isn't enough
CodeClone 2.1.0a1 introduces a structural change-control layer that bounds AI agent edits in Python codebases before they happen, not just reviews the diff after.
DevTime scans Cal.com and admits uncertainty instead of guessing
Local-first scanner DevTime flagged Cal.com's billing webhooks as unproven behavior rather than guessing from file names, exposing why evidence-based confidence matters for AI coding agents.
Metis: Arm's Open-Source Agentic Security Review Tool
Metis, built by Arm's Product Security Team, is an open-source framework that uses LLM reasoning to find security vulnerabilities across large codebases.
Why Your AI Code Assistant Needs a Static Pre-Pass
BrassCoders feeds deterministic static-analysis output to LLMs, boosting both speed and accuracy in code review, backed by 2025 research on the pairing.