Static Application Security Testing
Named by 6 kept items in this workspace.
Search every workspace for Static Application Security Testing. It matches the name as written, so it can find other things that share it.
The items that name it 6
analyzes source code without executing it, from pattern-matching linters to AST-based semantic analysis and taint tracking; struggles with C++ macros and templates
Figma's agents found bugs SAST and human review missed, including 2 criticals.
Argo is described as an LLM-native SAST, static by design, never executing the target code
static application security testing
Automated analysis of source code to detect vulnerabilities
Examines the structure of an app's code for potential vulnerabilities
All techniques in this workspace.