DAE change their mind on SAST tools after chasing one SQL injection bug for 9 hours?

Dylan Murray · 2026-09-24T06:25:04.141828+00:00

I always figured running Semgrep was a waste since I could just read the code myself, but after burning 9 hours in San Jose hunting a blind SQLi in a Django view that a 4 second scan flagged in the f-string on line 112, I'm not so sure anymore.

SMM Buzz

Loading…

DAE change their mind on SAST tools after chasing one SQL injection bug for 9 hours? | Appsec Tools - SMM Buzz