@Semgrep

A developer benchmarked four Python AI-application security scanners—Bandit, Semgrep, vulnhuntr, and getdebug—against ten hand-written Python fixtures and the simonw/llm codebase. Getdebug achieved 10…

A developer has released Swarm Audit, an open-source command-line tool that detects when AI-generated pull requests cheat by deleting tests, weakening assertions, or swallowing errors in empty catch b…

OpenGuard is an open-source, self-hosted static code analysis platform that serves as an alternative to tools like SonarQube, enabling developers to scan codebases, track security issues, and manage r…