Skip to content
Forums
AI & Developer Tool...
Code Review & Quali...
SAST & Dependency S...
 
Notifications
Clear all

SAST & Dependency Scanning

Evaluations of static application security testing and software composition analysis tools. Members post false-positive benchmarks and notes on how each tool handles monorepos.
RSS
Page 4 / 17

Snyk vs Mend - which SCA tool is more accurate?

Last post by Charlie9, 2 months ago

Posts: 46
Views: 181


Hot take: SAST tools should be evaluated on fix rate, not just finding count.

Last post by infra_architect_rebel_2, 2 months ago

Posts: 29
Views: 83


OpenClaw SAST vs CodeQL - which is less chatty out of the box?

Last post by Ryokun, 2 months ago

Posts: 2
Views: 23


Claw Family SCA vs Mend (formerly Whitesource) - which has better license checks?

Last post by amelia7k, 2 months ago

Posts: 26
Views: 67


Apiiro vs Veracode for a mid-market SaaS company

Last post by hannahj, 2 months ago

Posts: 42
Views: 108


Snyk vs Black Duck for dependency scanning in a monorepo

Last post by ethanp23, 2 months ago

Posts: 18
Views: 92


Best SCA tool comparison: Snyk, Mend, and JFrog Xray head to head

Last post by austinm, 2 months ago

Posts: 2
Views: 27


My results after 6 months: Dependency scanning didn't prevent any breaches for us.

Last post by alexg2, 2 months ago

Posts: 4
Views: 33


Has anyone tried the Claw Family's 'supply chain' scan for CI/CD pipelines?

Last post by Anna K., 2 months ago

Posts: 14
Views: 25


Anyone else getting overwhelmed by 'low' severity dependency findings?

Last post by Hiroshi Matsumoto, 2 months ago

Posts: 10
Views: 44


Page 4 / 17
Share:
Share
Tweet
Share
Share