Suman Maity·Oct 26Why AI Should Never Grade Its Own CodeBeyond linters and LLM bias: Building a robust validation loop where static analysis and models keep each other honest.
Jorg Sowa·Oct 18mir: A Fast, Drop-In Alternative to Psalm, Written in RustWhy I built another PHP static analyzerA response icon1A response icon1
Hüseyin Akdoğan·Oct 13Introduction to Error Prone: How to Catch Bugs at Compile TimeTL;DR: Some code compiles without complaint and is still wrong. Error Prone plugs into javac and breaks the build on code like this. It…
Unicorn Developer·Oct 8Go vet can’t go: How to create your own Go analyzer? — Key pointsIn this live talk, PVS-Studio’s Developer Advocate walks through Go’s built-in tools and code-parsing capabilities, explains the basics of…
PWNXOTUS·Sep 24What a Real-World Security Audit Taught Me About the Vulnerabilities That Just Won’t DieEvery year, OWASP publishes its Top 10. Every year, security teams cite it in training decks. And yet, when you actually dig into a…
InPVS-StudiobyUnicorn Developer·Sep 17PVS-Studio for Go: Quick overview of new diagnostic rulesPVS-Studio 8.0 is here! We added support for Go project analysis and much more. This article discusses some of the new diagnostic rules for…
Akanbi Oluwakunle Johnson·Sep 12Beyond Dynamic Testing: What Android Static Analysis RevealsFor the past few days, I’ve been spending a lot of time researching static analysis of Android applications, and honestly, it has started…
Ben Ross·Sep 2It’s B+Trees All The Way DownThe previous post described the graph schema necessary to represent source code as a graph. This post will describe how that graph is…
Ben Ross·Sep 1Representing Source Code as a GraphSource code is (basically) a graph. Functions are nodes. Statements are nodes. Files are nodes. Function calls are edges. Macro invocations…
