Tag

code scanning

18 articles

Latest in code scanning

Blogs

GitHub’s Security Autofix Agent Now Remembers What It Fixed

GitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, reviews and coding workflows.

Sep 28, 20263 min

All code scanning Articles

Showing 1–18 of 18

Nov25

Endor Labs Adds AI SAST Tool to Discover Vulnerabilities in Code

Endor Labs launches an agentic AI-powered SAST tool that drastically reduces false positives, identifies deeper code flaws and helps DevSecOps teams secure AI-generated code across…

3 min

Mar07

Application Performance Management/Monitoring

appCD Launches Platform to Securely Provision Cloud Infrastructure

appCD’s platform analyzes an application about to be deployed and automatically generates the code to provision the required infrastructure.

3 min

Jan25

Blogs

5 Security Threats DevOps Teams Should Know

DevOps security (DevSecOps) is about breaking down silos and promoting open collaboration across teams.

3 min

Jan23

Legit Security Applies AI to Detect Vulnerable Application Secrets

Legit Security expanded the scope of its ASPM platform to make use of AI to discover vulnerable application secrets more accurately.

3 min

Jun29

Blogs

HashiCorp Acquires BluBracket to Extend Secrets Management Reach

HashiCorp this week acquired BluBracket to add a set of static secrets discovery tools to its portfolio.

3 min

Apr17

Application Performance Management/Monitoring

Mobb Launches Community Edition of Automated Remediation Tool

Mobb today made available a free community edition of a namesake tool that creates fixes to open source vulnerabilities. The fixes are based on the results of code scanning by a st…

3 min

Mar24

Blogs

Software Supply Chain Risk Management: A 2023 Guide

Software supply chain risk management (SSCRM) refers to the process of identifying, assessing and mitigating risks associated with third-party software components and services that…

3 min

Oct31

Blogs

The Scariest Things About SCA

It is a time of ghouls, mischievous spirits and David S. Pumpkins. In the spirit of Halloween, here are the top five scariest limitations of software composition analysis (SCA) too…

3 min

Aug11

Blogs

Cycode Expands Scope of AppDev Security Platform

At the Black Hat USA 2022 conference, Cycode this week announced it has added static application security testing (SAST) and container scanning capabilities to its software composi…

3 min

Jul12

Application Performance Management/Monitoring

CodeLogic Toolkit Increases Visibility Into App Dependencies

CodeLogic launched today a toolkit that enables developers to scan binaries, runtime application behavior and database connections and then leverage graph technology to identify co…

3 min

Jul06

Blogs

Turning Off DevSecOps Noise for Functional Fidelity

Analyzing the DevOps and DevSecOps software marketplace demonstrates the high demand for tools and platforms that reduce false positives. As businesses and organizations adopt a ri…

3 min

Jun03

Continuous Delivery

Contrast Security Adds Free Code-Scanning Tool

Contrast Security this week made available a free security tool that enables developers to scan their code using the same core engine used by the cybersecurity team within their or…

3 min

May25

DevOps and Open Technologies

WhiteSource Becomes Mend, Launches Automated Remediation Platform

WhiteSource rechristened itself Mend today and launched a remediation platform that automatically resolves security issues for application developers. Rami Sass, co-founder and CEO…

3 min

May09

Application Performance Management/Monitoring

OpenSSF Adds Open Source Package Analysis Tool Prototype

The Open Source Security Foundation (OpenSSF) has made available a prototype of a package analysis tool that has already identified more than 200 malicious packages uploaded to PyP…

3 min

Apr13

Blogs

DevSecOps Tools: Hot Air Ahead

I, like most of you, don’t like hardcore marketing that hinges its statements on “Well, that’s technically true…” I also am not a fan of talking heads that spew predictions about t…

3 min

Mar29

Continuous Testing

GitLab Allies With Rezilion to Add Workload Analysis Tool

Rezilion has integrated its workload analysis tool with the continuous integration (CI) framework provided by GitLab. The move is part of an effort to make it simpler for developer…

3 min

Feb04

DevOps and Open Technologies

WhiteSource Tightens Code Scanning Tool Integration with Azure DevOps

WhiteSource has added the Microsoft Azure DevOps platform to the list of continuous integration/continuous delivery (CI/CD) platforms its open source vulnerability scanning tools n…

3 min