Tag: #semgrep
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 4 posts
LSP & Tree-sitter Ecosystem 2026 — ast-grep / Biome / Helix / Zed / Neovim Treesitter / Per-Language LSPs Deep Dive
In 2026, the real center of gravity of code tooling is no longer "which app you use." It is two standards. LSP (Language Server Protocol) standardized intelligence; Tree-sitter standardized structure. On top of these two
2026-05-16 · 20 min read #lsp#tree-sitter#ast-grep#biomejs#marksmanCode Quality & Static Analysis 2026 Deep Dive — SonarQube · CodeClimate · Codacy · DeepSource · Qodo Cover · Snyk Code · Semgrep · ESLint
A May 2026 deep dive across the code quality and SAST ecosystem. Covers platforms (SonarQube 10.x, SonarCloud, CodeClimate, Codacy, DeepSource, Qodana, Qodo Cover), SAST engines (Semgrep 1.x, CodeQL, Snyk Code, Veracode,
2026-05-16 · 21 min read #code-quality#static-analysis#sonarqube#codeclimate#codacyStatic Analysis / SAST 2026 — Semgrep / CodeQL / Snyk / SonarQube / Aikido / Trivy Deep Dive
Mapping the 2026 code security tooling landscape — Semgrep (the de facto OSS SAST plus Pro engine and Supply Chain), CodeQL (the heart of GitHub Advanced Security, dataflow king), Snyk Code (SAST+SCA after the DeepCode A
2026-05-15 · 26 min read #security#sast#static-analysis#semgrep#codeqlModern Code Review and Merge Pipelines — PR, Merge Queue, Stacked PRs, Monorepo, AI Review, Trunk-Based, Husky, Semgrep Deep Dive (2025)
The daily activity we talk about least. PR sociology, Code Owners, Merge Queue (GitHub/Mergify/Aviator/Graphite), Stacked PRs (Graphite, Sapling, Jujutsu), Monorepo vs Polyrepo 2025, Nx/Turborepo/Moon/Bazel, AI review (C
2026-04-15 · 12 min read #code-review#pull-request#merge-queue#monorepo#stacked-prs