https://blog.scandrix.dev/ Deep dives on AST analysis, taint tracking, and the engineering behind reliable automated code review. en-us Mon, 12 Oct 2026 00:00:00 GMT Next.js https://www.rssboard.org/rss-specification https://blog.scandrix.dev/top-7-owasp-vulnerabilities-linters-miss/ https://blog.scandrix.dev/top-7-owasp-vulnerabilities-linters-miss/ Mon, 12 Oct 2026 00:00:00 GMT Security ScanDrix Engineering Single-file linters miss flaws that span file boundaries. Here are 7 critical OWASP vulnerabilities only whole-codebase taint tracking can catch. https://blog.scandrix.dev/how-to-build-automated-ast-security-gate-github-actions/ https://blog.scandrix.dev/how-to-build-automated-ast-security-gate-github-actions/ Thu, 08 Oct 2026 00:00:00 GMT Engineering ScanDrix Engineering How to configure a sub-minute deterministic AST security gate in GitHub Actions that blocks vulnerabilities before merge without slowing down CI. https://blog.scandrix.dev/why-ai-reviewers-hallucinate-cross-file-diffs/ https://blog.scandrix.dev/why-ai-reviewers-hallucinate-cross-file-diffs/ Tue, 29 Sep 2026 00:00:00 GMT Engineering ScanDrix Engineering Why feeding raw git diffs to LLMs causes hallucinated bugs, and how compiling full AST syntax trees gives models the ground truth they need. https://blog.scandrix.dev/best-sonarqube-alternatives-2026/ https://blog.scandrix.dev/best-sonarqube-alternatives-2026/ Wed, 15 Apr 2026 00:00:00 GMT Guides ScanDrix Research Tired of slow CI build times and false positives? Explore the 8 best SonarQube alternatives for code quality, security, and AI review in 2026. https://blog.scandrix.dev/best-coderabbit-alternatives-2026/ https://blog.scandrix.dev/best-coderabbit-alternatives-2026/ Tue, 14 Apr 2026 00:00:00 GMT Product ScanDrix Research Looking for a CodeRabbit alternative? We compared the top 7 AI code review tools across AST accuracy, cross-file reasoning, VPC hosting, and pricing. https://blog.scandrix.dev/why-linters-miss-cross-file-vulnerabilities/ https://blog.scandrix.dev/why-linters-miss-cross-file-vulnerabilities/ Wed, 18 Mar 2026 00:00:00 GMT Security ScanDrix Engineering Pattern matching is excellent inside a single file and structurally blind across files. Here is the concrete shape of the problem, and what actually fixes it. https://blog.scandrix.dev/ast-taint-tracking-for-monorepos/ https://blog.scandrix.dev/ast-taint-tracking-for-monorepos/ Wed, 04 Mar 2026 00:00:00 GMT Engineering ScanDrix Engineering How cross-package dependencies in monorepos break naive linters, and how inverse-importer AST graphs keep taint analysis fast and accurate. https://blog.scandrix.dev/dry-run-rules-before-you-enforce-them/ https://blog.scandrix.dev/dry-run-rules-before-you-enforce-them/ Thu, 19 Feb 2026 00:00:00 GMT Guides ScanDrix Engineering Shipping a new lint rule to an entire organisation on day one is how you get a rule disabled by Friday. Here is the rehearsal-first workflow we recommend. https://blog.scandrix.dev/byok-llm-routing-for-security-reviews/ https://blog.scandrix.dev/byok-llm-routing-for-security-reviews/ Tue, 03 Feb 2026 00:00:00 GMT Product ScanDrix Engineering Bringing your own model key is a privacy decision with real architectural consequences. What changes in the review pipeline, and what does not.