Tag: #static-analysis
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 4 posts
Is AI Code Review Actually Worth It — What Measured Evidence Says About Accuracy and False Positives ♪ Listenable
Marketing copy for AI code review tools is full of numbers like "80% of PRs need no human comment," yet almost none of it publishes precision and false-positive rates alongside. Pull the public measurements together and
2026-07-17 · 25 min read #ai#code-review#static-analysis#evaluation#software-engineeringElixir 1.20's Gradual Type System — The Reality of Finding 'Verified Bugs' Without Annotations
Elixir v1.20, released on June 3, 2026, closed out the first milestone of the set-theoretic type system work that began in 2022. Every Elixir program is now gradually type-checked without a single type annotation, and th
2026-07-16 · 17 min read #elixir#type-system#beam#compiler#static-analysisCode Quality & Static Analysis 2026 Deep Dive — SonarQube · CodeClimate · Codacy · DeepSource · Qodo Cover · Snyk Code · Semgrep · ESLint ♪ Listenable
A May 2026 deep dive across the code quality and SAST ecosystem. Covers platforms (SonarQube 10.x, SonarCloud, CodeClimate, Codacy, DeepSource, Qodana, Qodo Cover), SAST engines (Semgrep 1.x, CodeQL, Snyk Code, Veracode,
2026-05-16 · 21 min read #code-quality#static-analysis#sonarqube#codeclimate#codacyStatic Analysis / SAST 2026 — Semgrep / CodeQL / Snyk / SonarQube / Aikido / Trivy Deep Dive ♪ Listenable
Mapping the 2026 code security tooling landscape — Semgrep (the de facto OSS SAST plus Pro engine and Supply Chain), CodeQL (the heart of GitHub Advanced Security, dataflow king), Snyk Code (SAST+SCA after the DeepCode A
2026-05-15 · 26 min read #security#sast#static-analysis#semgrep#codeql