Sonda – An open-source static analysis tool built in Rust (sonda.sh)

2 comments

[ 0.15 ms ] story [ 5.1 ms ] thread

[dead]

From comparison to SonarQube "Current limitations: No data-flow or taint analysis yet. Rules are syntactic or use the semantic layer, so they're fast and predictable but miss bugs that need values traced across functions."