Tag: secure-development
| # | Post Title | Date | User |
| STRIDE, DREAD and PASTA: which threat modeling method fits now? | 3 months ago | NHI Mgmt Group | |
| Did release-time SDL checks miss the commit-stage risk? | 3 months ago | NHI Mgmt Group | |
| Why do separate tools split code quality and SAST priorities? | 3 months ago | NHI Mgmt Group | |
| Are Opus 5's 2.3x code volumes raising review risk? | 3 months ago | NHI Mgmt Group | |
| Why does automated vulnerability remediation stall without context? | 3 months ago | NHI Mgmt Group | |
| Why does Frontier AI widen AI-assisted vulnerability scanning? | 3 months ago | NHI Mgmt Group | |
| Why does AI-generated code shift control work into Prompt-to-Production? | 3 months ago | NHI Mgmt Group | |
| Does CodeQL rule validation catch semantic errors in policy as code? | 3 months ago | NHI Mgmt Group | |
| Who is exposed when local SAST hits Windows endpoints? | 3 months ago | NHI Mgmt Group | |
| Could Assistant's feedback loop beat incomplete AI-generated fixes? | 3 months ago | NHI Mgmt Group | |