Automated Static Analyzers in Secure Code Review with demonstration of Puma Scan (pumasecurity.io)
Absolute AppSec topics and tips for Application Security
In this video, Seth (@sethlaw) and Ken (@cktricky) discuss the usefulness of automated static analyzers for secure code review. The hosts call out Semgrep (semgrep.dev) as a reliable analysis tool, and then Seth dives into a demonstration of Puma Scan – a useful analysis tool for .NET applications.