7 stories tagged static-analysis, newest first.
49 points by ericholiveira | 28 comments
GitHub repository for Farol, an open-source CLI and GitHub Action that scores pull request merge risk, highlighting risky files, reach, diff coverage and contract breaks.
15 points by maharshi365 | 4 comments
GitHub repository for deslop, an oxlint plugin with lint rules targeting AI-generated TypeScript issues like unsafe types, duplicate code, and low-value tests.
44 points by 91awebsi | 3 comments
GitHub repository for treepeat, an open-source tool that detects duplicate and structurally similar code across many languages using Tree-sitter ASTs.
88 points by aray07 | 13 comments
Trail of Bits blog post on using AI agents to build custom tooling (LSP server, decompiler, static analyzer) and formal models for auditing the Miden zero-knowledge VM.
403 points by todsacerdoti | 78 comments
Go Blog post by Alan Donovan explaining the rewritten go fix command in Go 1.26 for modernizing code, its analysis infrastructure, and self-service analyzers.
505 points by robhlam | 145 comments
Mastodon post by curl maintainer Daniel Stenberg reporting that Joshua Rogers' AI-assisted tools found many potential curl bugs, with 22 fixes already landed.
360 points by dmalcolm | 125 comments
Red Hat Developer article by David Malcolm describing improvements to the static analyzer (-fanalyzer) in the GCC 14 compiler.