Show HN: Cognium – Tree-sitter+taint Tracking SAST for Java,Python,JS,Rust(cognium.dev)
cognium.dev
Show HN: Cognium – Tree-sitter+taint Tracking SAST for Java,Python,JS,Rust
https://cognium.dev/
open-source static analysis tool for finding security vulnerabilities
2 comments
Nice system but quick question: how does this compare to something like Semgrep? Semgrep also does tree sitter based pattern matching and has taint tracking now. Is the main difference the rule engine, performance, or something else? Always interested in more options in this space but the "open source SAST" field is getting crowded.