PHPStan Static Analysis in PHP
Explore PHPStan for static analysis in PHP, improving code quality and efficiency. Learn implementation techniques and integrate with CI workflows for automated testing.
Coccinelle for Rust - Searching and Modifying Rust Code
Exploring Coccinelle's adaptation for Rust, its potential in Linux development, and seeking feedback on the tool's current state and future applications.
Compile-time Detection of Atomic Context Violations for Kernel Rust Code
Explore Klint, a tool for detecting atomic context violations in kernel Rust code at compile-time, enhancing safety without runtime costs or ergonomic issues.
Compiling for Verified Targets: BPF Optimization Challenges
Exploring strategies for compiling BPF programs that meet strict kernel verifier requirements. Discusses challenges, potential solutions, and future implications for optimizing compilers targeting verified environments.
Rust for Linux - Progress and Future Directions
Exploring Rust integration in Linux: progress, safe abstractions, tooling, and future directions. Highlights include core functionality, kernel primitives, pinned-init API, and workflow changes.
Using Static Analysis to Catch Configuration Vulnerabilities
Learn to secure containers and IaC using static analysis. Discover how to identify misconfigurations, prevent vulnerabilities, and implement early detection in your development workflow for improved application security.
The Future of Understanding Ruby Code - Ruby 3.3 Parsing API
Explore the evolution of Ruby code parsing and the new unified API in Ruby 3.3, revolutionizing how developers understand and work with Ruby code.
SyzDescribe - Automated Static Generation of Syscall Descriptions for Kernel Drivers
Automated generation of syscall descriptions for Linux kernel drivers, enhancing Syzkaller's bug-finding capabilities and improving accuracy, coverage, and crash detection in kernel fuzzing.
Detecting Malicious Dependencies at Scale with Static Analysis
Explore static analysis techniques for identifying malicious dependencies in open-source packages, including Semgrep rules and metadata analysis to enhance software supply chain security.
Tools of the Trade for PHP Developers
Comprehensive overview of essential PHP development tools, including dephpend, php-cs-fixer, phpstan, phan, and PHPUnit. Learn how to integrate these tools into your workflow for improved productivity and code quality.
Getting the Most Out of Android Lint - Advanced Techniques
Explore advanced Android Lint features: custom checks, annotations for threading bugs, interoperability improvements, and CI performance optimization for enhanced app development.
Coding in Style - Static Analysis with Custom Lint Rules
Learn to create, test, and distribute custom Android Lint rules to automate best practices enforcement, improve code health, and streamline code reviews for your development team.
Squashing Bugs with Static Analysis
Discover advanced static analysis tools for PHP to find and prevent bugs efficiently, improving code quality and development workflow.
One Compiler - Graal VM and Substrate VM Overview
Explore advanced Java compilation techniques, including Truffle, Graal VM, and Substrate VM, for optimized performance and efficient execution of JVM languages.
Gradual Typing for Ruby at Scale with Sorbet
Explore Sorbet, a fast typechecker for Ruby designed to enhance developer productivity in large codebases. Discover tools and techniques for efficient type checking in growing projects.
Codebase Research - Data-Driven API Design and Java Language Enhancement
Explore data-driven API design and Java language enhancements through analysis of Google's massive codebase, gaining insights from 300 million lines of code in minutes.
OpenJDK Development and Optimization at Google
Explore Google's OpenJDK development, static and dynamic analysis, profiling challenges, and GC optimization with Jeremy Manson in this insightful talk on Java engineering practices.
Testing GUI Apps - What to Test and How to Test It - Mini Coding Course for Beginners
Learn automated software testing with a hands-on Kivy GUI project. Covers static and dynamic analysis, unit testing, and various test scenarios to improve code quality and reliability.
Safer C++ with MISRA-C++-2023
Explore MISRA-C++:2023 guidelines for safer, higher-quality C++ programming in critical systems. Learn key rules, modern C++ design, and strategies for adhering to seemingly challenging guidelines.
Root Canal Static Analysis Audit of Zephyr
Comprehensive static analysis audit of Zephyr's code quality, revealing deeper security vulnerabilities beyond standard linters. Insights on advanced bug detection and fixing processes for critical open-source projects.
Understanding Supply Chain Threats with Static Analysis - GopherCon 2023
Explore a CLI tool for Go that detects privileged permissions in package dependencies, enhancing security and preventing supply chain attacks.