Abstract: This SoK paper presents findings from a survey conducted on the current state of tools and techniques used in the static configuration analysis of Infrastructure as Code (IaC). Our findings ...
Metis is an open-source, AI-driven tool for deep security code review, created by Arm's Product Security Team. It helps engineers detect subtle vulnerabilities, improve secure coding practices, and ...
Freeze is also super customizable and ships with an interactive TUI. If possible, freeze auto-detects the language from the file name or analyzing the file contents. Override this inference with the - ...