#sast
Tagged “sast”
2 articlesCode quality & testing
GitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor
GitLab moved Security Review Flow into public beta on the Duo Agent Platform. You add it to a merge request like a human reviewer, and it focuses on authorization and business-logic bugs that pattern-based scanners typically miss.
Jul 17, 2026 · Priya NairSecurity & supply chainCheckmarx's pitch on its new SAST engine: the classifier in front of the queue is the product
Checkmarx unveiled a SAST engine that pairs a deterministic rules scanner with a security-trained LLM and a Findings Analysis Engine that triages true vs. false positives before developers see them. The CI/CD-relevant story is less the model and more the triage layer in front of the merge queue.
Jun 21, 2026 · Tomás Vega