← Front PageTools Desk
Tools
Semgrep Supply Chain adds reachability analysis for transitive dependencies
Semgrep adds reachability analysis for transitive deps — finally cuts SCA noise to signal.
Summary written by editorial AI · Source link below
Semgrep now traces whether vulnerable code paths in transitive dependencies are actually reachable from application code, drastically reducing noise.
§
Continue with
More from the Tools Desk
- Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents3d
- Filter generation in practice: from algorithms to LLMs30 Oct
- RHINO: Guided Reasoning for Mapping Network Logs to Adversarial Tactics and Techniques with Large Language Models28 Oct
- WADBERT: Dual-Channel Web Attack Detection via Permutation-Invariant Parameter Modeling27 Oct
- CVE-to-ATT&CK Mapping via Evidence-Constrained Ranking27 Oct