#StaticAnalysis
LightNews LightNews
informaq.bsky.social
Introducing SHARP, a rule-based static analysis framework that decouples hardware ISA constraints from validation engines, enabling quantum services to adapt programs to evolving instruction sets without modifying core analysis logic.

#QuantumSoftware #StaticAnalysis #Research
SHARP: Hardware-Configurable Static Analysis Framework for Quantum Programs
arxiv.org
November 3, 2026 at 9:16 AM
infoq.com
Reverse Engineer Anything (REA), an #opensource project with 200K+ GitHub stars, connects coding agents like Claude Code and Codex to tools like Ghidra, Hopper, and IDA.

👉 Learn more: buff.ly/2QMWM8L

#InfoQ #AI #AIagents #StaticAnalysis #ReverseEngineering
October 19, 2026 at 5:35 PM
beefedai.bsky.social
CI/CD for Medical Device Firmware: Building Compliant Pipelines

https://beefed.ai/en/ci-cd-medical-firmware-compliant-pipelines

#CICD #MedicalFirmware #AutomatedTesting #StaticAnalysis #ArtifactManagement
CI/CD for Medical Device Firmware: Building Compliant Pipelines
beefed.ai
October 17, 2026 at 9:58 PM
mikekuykendall.bsky.social
Skiptrace: static analysis for Common Lisp reader conditionals.

It finds #+/#- and ASDF :if-feature guards that no selected implementation reads; contradictions, typos, and dead branches; w/o loading or READing the code.

#CommonLisp #Lisp #StaticAnalysis #OpenSource

github.com/Michael-A-Ku...
GitHub - Michael-A-Kuykendall/skiptrace: Static analysis for Common Lisp reader conditionals. Finds #+/#- and ASDF :if-feature guards that no selected implementation ever reads.
Static analysis for Common Lisp reader conditionals. Finds #+/#- and ASDF :if-feature guards that no selected implementation ever reads. - Michael-A-Kuykendall/skiptrace
github.com
October 17, 2026 at 5:26 PM
dyalog.bsky.social
Dyalog's Static Analysis Tool (DSAT) is now in real-world use.

At Dyalog '26, Brandon Wilson covers DSAT in practice and what's next: CI/CD checks, session integration, a VS Code extension, and AI tooling.

#Dyalog26 #APL #StaticAnalysis
October 14, 2026 at 10:56 AM
singulism.bsky.social
Meta Releases Lifeguard to Flag Python Lazy Import Issues

#Python #StaticAnalysis #LazyImports

https://singulism.com/en/2026-10-10-lifeguard-python-lazy-imports/
Meta Releases Lifeguard to Flag Python Lazy Import Issues
Static analysis tool Lifeguard debuts to detect code incompatible with PEP 810 lazy imports.
singulism.com
October 10, 2026 at 7:27 PM
cody-programmer08.bsky.social
PVS-Studio’s JS/TS analyzer now has a Control Flow Graph:

> language-agnostic core built for future languages
> ability to detect unreachable code and loops that run only once
> base for taint and data flow analysis

pvs-studio.com/en/blog/post...
#JavaScript #TypeScript #StaticAnalysis
How we made JavaScript analyzer understand control flow
Learn about the control flow graph (CFG), how we've implemented it, and why it's useful.
pvs-studio.com
October 9, 2026 at 1:56 PM
amz34.bsky.social
Explained knowledge graph of a Python codebase, standard library only.
https://github.com/Amz34/graphwright
https://awesome-agent-infra.pages.dev/?utm_source=bluesky&utm_medium=social&utm_campaign=gh_weekly-2026-10-07&utm_content=dashboard
#Python #OpenSource #StaticAnalysis
October 7, 2026 at 12:46 PM
michabbb.bsky.social
🚀 #PHPStan 2.3.0 is up to 7.5× faster than ten months ago: analysing #WordPress dropped from 60.5s to 7.9s #PHP #staticanalysis #opensource
🧵👇
October 6, 2026 at 8:58 AM
icepfl.bsky.social
Today, we are at the IC Colloquium by Pavle Subotic about Abstract Interpretation on irregular programming environments.
This talk explores how static analysis and abstract interpretation can bring software engineering rigor to real-world data workflows.
#EPFL #IC #StaticAnalysis
September 24, 2026 at 3:15 PM
cody-programmer08.bsky.social
PVS-Studio 8 brings support for Go project analysis, plus new diagnostics and updates. Today, we show the new Go-specific rules we built for this release.

pvs-studio.com/en/blog/post...

#Go #Golang #StaticAnalysis #CodeQuality #Development
PVS-Studio for Go: Quick overview of new diagnostic rules
PVS-Studio 8.0 is here! We added support for Go project analysis and much more. This article discusses some of the new diagnostic rules for Go that we developed for the latest version of our analyzer.
pvs-studio.com
September 17, 2026 at 1:34 PM
cody-programmer08.bsky.social
Great news! Major PVS-Studio 8.00 is here! 🦄

- Expanded language support: JavaScript, TypeScript, and Go
- New IDE plugins
- Extended logging system

See more in the press release >
#JavaScript #TypeScript #Go #StaticAnalysis #Dev #NewRelease
PVS-Studio 8.00: analyzers for JavaScript, TypeScript, and Go, plugins for WebStorm and GoLand, and more
PVS-Studio 8.00 has been released. This version features new analyzers for JavaScript, TypeScript and Go projects, new IDE plugins for WebStorm and GoLand, expanded support for MISRA C++ 2023, and...
pvs-studio.com
August 28, 2026 at 12:40 PM
annabel-baker.bsky.social
Defend AI Tools In CI/CD With Software Engineering

https://technet.live/defend-ai-tools-ci-cd-software-engineering/?utm_source=bluesky&utm_medium=social
#aitoolsecurity #staticanalysis #malwaredetection
August 25, 2026 at 6:37 PM
weld.bsky.social
Interesting approach of combining static analysis with LLM reasoning to find vulnerabilities in code. www.linkedin.com/posts/ai4cod...
Mayur Naik on LinkedIn: #neurosymbolic #llms #codeql #staticanalysis #securitybugs
My talk on finding security vulnerabilities by combining classical symbolic reasoners with modern-day LLMs: Recording: https://lnkd.in/gFc7ERFG Slide deck:…
www.linkedin.com
November 14, 2024 at 6:56 PM
ishwarisanap.bsky.social
www.linkedin.com/feed/update/...
#sast #applicationsecurity #appsec #cybersecurity #devsecops #securecoding #softwaresecurity #codesecurity #staticanalysis #cloudsecurity #infosec #cyberdefense #threatdetection #securedevelopment… | ...
𝐒𝐭𝐚𝐭𝐢𝐜 𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐓𝐞𝐬𝐭𝐢𝐧𝐠 (𝐒𝐀𝐒𝐓) 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐌𝐚𝐫𝐤𝐞𝐭 𝐒𝐢𝐳𝐞, 𝐒𝐡𝐚𝐫𝐞 & 𝐅𝐨𝐫𝐞𝐜𝐚𝐬𝐭 𝟐𝟎𝟐𝟔–𝟐𝟎𝟑𝟑 The current geopolitical environment, marked by rising cyber warfare, data sovereignty regulations, and sup...
www.linkedin.com
April 11, 2026 at 5:22 PM
infoq.com
#PHPStan, a static analysis tool for PHP, released v 2.0!

This release introduces new features and improvements that enhance code analysis, performance, and user experience.

Read more details on #InfoQ 👉 bit.ly/4ikySs5

#DevOps #PHP #StaticAnalysis
December 9, 2024 at 1:09 PM
latitude77.bsky.social
GitHub - ludo-technologies/pyscn: pyscn - An Intelligent Python Code Quality Analyzer #dev #python #pyscn #quality #code #vibecoding #staticanalysis
October 9, 2025 at 7:59 AM
ocramz.bsky.social
not sure this is the most efficient implementation, but I'm quite happy it's so compact.

With a tree traversal and left scan we get an annotated AST with a top-down static program analysis.

#haskell #plt #compilers #staticanalysis
a helper function to compute the lexical variable scope of a program AST using functor fixpoint machinery. As a result we get an annotated AST with Cofree at the recursion points, decorated with the lexical scope at that point.
July 15, 2025 at 8:24 AM
technadu.com
Brakeman scans Rails applications by reading source code directly, helping teams spot security issues early without running the app.
It’s a reminder that not all security testing needs to happen in production-like environments.

#AppSec #Rails #StaticAnalysis #SecureDevelopment #TechNadu
January 27, 2026 at 5:37 PM
agentmeter.bsky.social
🔥 Afternoon Hot Take

Static analysis for agent code is overdue. The AST token matching for duplication detection and Git hotspot tracking are legitimately useful beyond standard linters.

#StaticAnalysis #AICode #TypeScript #DevTools
How to clean up AI-generated code with Fallow - LogRocket Blog
Learn how to use Fallow to find dead code, duplicate logic, and complex functions, keeping AI-generated code clean, maintainable, and easier to refactor.
blog.logrocket.com
July 22, 2026 at 7:35 PM
robrich.bsky.social
https://dev.to/accesto/using-phpstan-with-symfony-static-analysis-for-better-php-code-quality-26eh - PHPStan brings #StaticAnalysis to #PHP and #Symfony. Nice walk-through https://github.com/mromanczuk.
Using PHPStan with Symfony - static analysis for better PHP code quality
Software developers are not robots, even after seven years of PHP programming experience, I do...
dev.to
November 20, 2024 at 5:32 PM
robrich.bsky.social
https://github.com/koalaman/shellcheck - #StaticAnalysis for #shell scripts. Available on the web, in your IDE, or as a CI step. Nice tool Vidar Holen.
GitHub - koalaman/shellcheck: ShellCheck, a static analysis tool for shell scripts
ShellCheck, a static analysis tool for shell scripts - koalaman/shellcheck
github.com
November 20, 2024 at 5:31 PM
beefedai.bsky.social
High-Fidelity Secret Scanning: Regex, Entropy, and Static Analysis

https://beefed.ai/en/high-fidelity-secret-scanning-techniques

#SecretScanning #RegexSecretsDetection #EntropyAnalysis #StaticAnalysis #FalsePositiveReduction
High-Fidelity Secret Scanning: Regex, Entropy, and Static Analysis
beefed.ai
May 15, 2026 at 3:11 AM
semgrep.com
⏰ Tomorrow, 10am BST – webinar with esure ⏰

Last chance to join us as we chat all things AI, AppSec and scaling SAST with esure’s Kenichi Shibata! 👇

Sign up for access: semgrep.dev/events/emea-...

#AppSec #AI #DevSecOps #StaticAnalysis #Cybersecurity #DeveloperExperience
July 21, 2025 at 4:31 PM
semgrep.com
Exciting news! 🎉 Semgrep is featured in Sandeep Saxena’s blog on mastering SAST techniques for secure software.
Check out the full post to enhance your SAST strategy!

infosecwriteups.com/everything-a...

#Semgrep #SAST #SecureCode #DevSecOps #CyberSecurity #StaticAnalysis #VulnerabilityDetection
Everything About Secure Code Reviews: Mastering SAST Techniques for Robust Software
Abstract
infosecwriteups.com
December 10, 2024 at 8:03 PM