Sonda – An open-source static analysis tool built in Rust

 (sonda.sh)

2 points | by lvaoliveira 9 hours ago ago

3 comments

  • nonamee 8 hours ago ago

    From comparison to SonarQube "Current limitations: No data-flow or taint analysis yet. Rules are syntactic or use the semantic layer, so they're fast and predictable but miss bugs that need values traced across functions."

    [-]
  • lvaoliveira 9 hours ago ago

    [dead]