Click here to Skip to main content
15,917,176 members

Welcome to the Lounge

   

For discussing anything related to a software developer's life but is not for programming questions. Got a programming question?

The Lounge is rated Safe For Work. If you're about to post something inappropriate for a shared office environment, then don't post it. No ads, no abuse, and no programming questions. Trolling, (political, climate, religious or whatever) will result in your account being removed.

 
GeneralRe: This just happened at lunch. Pin
raddevus22-May-24 7:47
mvaraddevus22-May-24 7:47 
GeneralRe: This just happened at lunch. Pin
Choroid23-May-24 5:28
Choroid23-May-24 5:28 
GeneralRe: This just happened at lunch. Pin
trønderen23-May-24 6:18
trønderen23-May-24 6:18 
GeneralRe: This just happened at lunch. Pin
Choroid24-May-24 8:09
Choroid24-May-24 8:09 
GeneralRe: This just happened at lunch. Pin
trønderen24-May-24 14:37
trønderen24-May-24 14:37 
GeneralRe: This just happened at lunch. Pin
Choroid24-May-24 20:23
Choroid24-May-24 20:23 
GeneralStatic security code analysis. Pin
GKP199220-May-24 20:52
professionalGKP199220-May-24 20:52 
GeneralRe: Static security code analysis. Pin
Pete O'Hanlon20-May-24 21:10
mvePete O'Hanlon20-May-24 21:10 
You do know that Sonar can help identify security vulnerabilities don't you? If you're using Visual Studio, you can also use security analyzers to help detect OWASP errors. To be honest, and I speak with a lot of experience in this area, SAST can be more dangerous because it gives you a false sense of safety. All SAST tells you is that the code you checked in doesn't have a vulnerability. It's not that great at determining that a dependency of a dependency of a dependency has a known vulnerability, or that you have an unpatched container or OS vulnerability. You need to consider security as a top to bottom thing, so you would be looking to leverage SAST, DAST (the dynamic version of SAST), IAST (the infrastructure version), and so on.

GeneralRe: Static security code analysis. Pin
GKP199220-May-24 21:11
professionalGKP199220-May-24 21:11 
GeneralRe: Static security code analysis. Pin
Kornfeld Eliyahu Peter20-May-24 21:47
professionalKornfeld Eliyahu Peter20-May-24 21:47 
GeneralRe: Static security code analysis. Pin
RickZeeland20-May-24 22:58
mveRickZeeland20-May-24 22:58 
GeneralRe: Static security code analysis. Pin
jschell21-May-24 12:38
jschell21-May-24 12:38 
GeneralRe: Static security code analysis. Pin
Sander Rossel21-May-24 22:31
professionalSander Rossel21-May-24 22:31 
GeneralRe: Static security code analysis. Pin
Matt Bond22-May-24 3:21
Matt Bond22-May-24 3:21 
GeneralRe: Static security code analysis. Pin
QED200323-May-24 3:49
professionalQED200323-May-24 3:49 
GeneralRe: Static security code analysis. Pin
englebart1-Jun-24 17:59
professionalenglebart1-Jun-24 17:59 
GeneralRe: Static security code analysis. Pin
GKP19922-Jun-24 3:41
professionalGKP19922-Jun-24 3:41 
GeneralWordle 1,067 Pin
Shane010320-May-24 18:05
Shane010320-May-24 18:05 
GeneralRe: Wordle 1,067 Pin
OriginalGriff20-May-24 18:41
mveOriginalGriff20-May-24 18:41 
GeneralRe: Wordle 1,067 Pin
GKP199220-May-24 18:58
professionalGKP199220-May-24 18:58 
GeneralRe: Wordle 1,067 Pin
ChandraRam20-May-24 20:12
ChandraRam20-May-24 20:12 
GeneralRe: Wordle 1,067 Pin
Amarnath S20-May-24 20:17
professionalAmarnath S20-May-24 20:17 
GeneralRe: Wordle 1,067 **** Spoiler **** Pin
StarNamer@work21-May-24 4:52
professionalStarNamer@work21-May-24 4:52 
GeneralRe: Wordle 1,067 **** Spoiler **** Pin
pkfox21-May-24 9:28
professionalpkfox21-May-24 9:28 
GeneralRe: Wordle 1,067 - 4 4 me Pin
pkfox20-May-24 21:20
professionalpkfox20-May-24 21:20 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.