We've been scanning code for decades. Sometimes scanning works well -- it finds meaningful flaws to fix. Sometimes it distracts us with false positives. Sometimes it burdens us with too many issues. We talk about finding a scanning strategy that works well and what the definition of "works well" should even be.

Segment Resources:

• https://www.lacework.com/blog/introducing-a-new-approach-to-code-security/

Show Notes: https://securityweekly.com/asw-273