Skip to content

Commit 3c71af2

Browse files
committed
docs(blog): drop bold lead-in from semgrep-vs-codeql Takeaways
1 parent 89d602e commit 3c71af2

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/content/blog/semgrep-vs-codeql-vs-opentaint.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -434,7 +434,7 @@ Five cases, one application, one vulnerability class. XSS in a Spring Boot proje
434434

435435
### Takeaways
436436

437-
**AST-pattern rules. Whole-program taint analysis.** Each tool plateaus at a different depth of analysis:
437+
Each tool plateaus at a different depth of analysis:
438438

439439
- **Semgrep CE** handles syntax matching and local taint tracking but stops at function boundaries.
440440
- **Semgrep Code** extends through inter-procedural analysis and field sensitivity but produces false positives on secure field variants and does not follow builder patterns or virtual dispatch.

0 commit comments

Comments
 (0)