TAG
#sast
Stories connected through a shared idea, actor, technology or theme.
CodeQL 2.26.4 expands language and GitHub Actions security coverageGitHub rolled CodeQL 2.26.4 into code scanning on github.com with Go 1.27 support, more precise Rust data-flow locations, new Spring R2DBC SQL-injection sinks and expanded Java, Kotlin, JavaScript, TypeScript and Python taint modelling. The release also adds GitHub Actions detections for mutable references to reusable workflows and improves checks on workflow actor fields.→SonarQube Hunter Agent adds reasoning-based security analysisSonar launched Hunter Agent for SonarQube Cloud to analyse broken access control, business-logic, authentication and session-management flaws. The agent traces code, data and identity flows across a codebase and verifies candidate findings before presenting them in the existing Sonar workflow.→