🧰 SAST

The items that name it 18

• What Is SAST? Static Analysis in the Age of AI-Generated Code | Endor Labs
  articleas tools2026-10-12It is written here as SAST (Static Application Security Testing): white-box analysis of source code, bytecode, or binaries for security flaws without running the application.

  Static Application Security Testing

• Guide to Implementing Software Supply Chain Security | Endor Labs
  articleas tools2026-10-12It is written here as SAST (Static Application Security Testing): examines source or binary code for coding errors.

  Static Application Security Testing

• State of Dependency Management 2025 | Endor Labs
  paperas tools2026-10-12It is written here as SAST (static application security testing; recommended for scanning AI-generated code).

  static application security testing; recommended for scanning AI-generated code

• Why vibe coding security is the next enterprise nightmare
  articleas tools2026-09-17It is written here as SAST (code scanning).

  Scans AI-generated code for security flaws before it merges

• OWASP OASIS
  repoas tools2026-09-05

  Scanning selected repositories to identify likely vulnerabilities

• Agentic Development Security: How to Secure Code Your Agents Write | Blog | Endor Labs
  articleas tools2026-09-02It is written here as SAST (traditional static application security testing).

  Scans source code for known bad patterns; catches many but not all AI-generated code flaws

• The Secure Agentic Development Lifecycle (ADLC), Explained | Blog | Endor Labs
  articleas tools2026-09-02It is written here as SAST (Static Application Security Testing).

  Rule-based tool that catches known insecure code anti-patterns; described as missing architectural design flaws and phantom/transitive dependencies

• AI Code Review: How to Actually Review Code an Agent Wrote | Blog | Endor Labs
  articleas tools2026-09-02It is written here as SAST (Static Application Security Testing).

  Scans source code for known bad patterns

• Could OpenClaw have actually hacked that Australian gym? We decided to test it.
  writeupas tools2026-08-25It is written here as SAST (general).

  Static analysis security testing; noted as unable to find IDOR-type vulnerabilities like the one in this case

• Finding vulnerabilities at every stage: what to run, and when
  articleas tools2026-08-12It is written here as SAST (traditional Static Application Security Testing).

  Pattern-based matching of code against known vulnerability patterns; deterministic, cheap, runs on every commit/PR and in the IDE for early feedback; gates CI/CD.

• SQL injection isn't dead
  articleas tools2026-07-22It is written here as SAST (static analysis).

  catches plain SQL injection where input runs into a query with no parameterized statement; noted it would not have caught the WordPress cross-request bug

• AI-Assisted Vulnerability Management
  articleas tools2026-07-18It is written here as SAST (Static Application Security Testing).

  Deterministic tooling for baseline hygiene and rule enforcement, used alongside LLM triage

• What nearly 10,000 developer environments reveal about agentic development risk
  articleas tools2026-06-23

  Static application security testing, part of existing AppSec controls that remain essential but insufficient alone against agentic risk

• Hard Truths: You've Built a Security Stack. Have You Built a False Sense of Security? | Tanya Janca
  videoas classification.technologies2026-05-27It is written here as SAST: Static Application Security Testing for first-party code inspection.
• Alice and Bob Learn Secure Coding: Chapter 2
  videoas tools2026-05-11It is written here as SAST (Static Application Security Testing): Scans codebases for programmatic security flaws.

  Static Application Security Testing

• Security Engineering is a Context Problem
  articleas tools2026-05-06

  Static analysis that detects issues like SQL injection (e.g. string concatenation into a SQL query) but without native visibility into reachability, attacker control, or data sensitivity

• Android deep link vulnerabilities: how intent filters lead to account takeover | Oversecured Blog
  articleas tools

  Traces data flow from deep link sources (URI parameters, Intent extras) to sinks such as WebView URL loading, startActivity(), file access and SQL queries; flags contains and startsWith host checks

• SDK security in mobile apps: the attack surface your team didn
  articleas toolsIt is written here as SAST (Static Application Security Testing).

  Source-code analysis that cannot look inside compiled third-party SDKs (.aar, .jar, .framework, .xcframework) unless it analyzes the compiled artifact

In every workspace you can read 19