TimeCodeSecurity – Deterministic AST SAST and Auto-Remediation for Python

2 pointsposted 8 hours ago
by AyushGaur

Item id: 49765426

3 Comments

doc_ick

4 hours ago

Please cite claude or llms when they write code.

“Most existing open-source SAST tools rely on regex patterns or LLMs”, this may be the case with new tools in the last 7 months but before then has definitely not been. (Bandit, semgrep, black duck, etc…)

I do like this as an intro project, but why did you choose to use Python source code as your validators and remediation? I initially assumed for llm.