Semgrep
AssessTools
A static analysis and code security platform used here with a multimodal vulnerability-detection pipeline.
Why it's here
Placed in Assess: 3 article(s) of evidence from 2 source(s), led by research-stage coverage, with 0 in the last 30 days. Confidence 45%.
Evidence (3)
- 7Hacker News·6/28/2026researchGLM 5.2 Outperforms Claude in IDOR Benchmarks
Semgrep reports that GLM 5.2, an open-weight model from Zhipu AI, achieved a 39% F1 score on IDOR detection, ahead of Claude Code's 32% in the same benchmark setup. The test highlights how much vulnerability-detection performance depends on the surrounding harness, while Semgrep's own purpose-built pipeline still performed better overall.
- 4Martin Fowler·5/20/2026researchThree More Static Code Analysis Sensors
Martin Fowler highlights a practical follow-up on using static code analysis and related sensors to help coding agents keep codebases maintainable. The article discusses feedback tools such as linting, dependency rules, coupling analysis, modularity review, and mutation testing to catch issues early and support self-correction.
- 5Martin Fowler·5/19/2026researchMaintainability sensors for coding agents
The article describes practical experiments with using automated “sensors” to help AI coding agents keep a codebase maintainable. It highlights tools such as linting, dependency checks, test coverage, mutation testing, and structural analysis to catch maintainability issues early and support self-correction before changes reach humans.