https://blog.rodolpheg.xyz/tags/devsecops/Recent content in DevSecOps on RORO's blogHugoencontact@rodolpheg.xyz (0xRo)contact@rodolpheg.xyz (0xRo)Fri, 12 Jun 2026 00:00:00 +0000https://blog.rodolpheg.xyz/posts/why-i-wanted-my-own-code-audit-tool/Fri, 12 Jun 2026 00:00:00 +0000contact@rodolpheg.xyz (0xRo)https://blog.rodolpheg.xyz/posts/why-i-wanted-my-own-code-audit-tool/<blockquote> <p>Quick note: this post is less technical than usual. I just felt like telling, openly, the story of the tool I&rsquo;m working on, and mostly how I felt all along the way.</p> </blockquote> <hr> <h2 id="the-realization-three-years-of-sast">The realization: three years of SAST</h2> <p>It&rsquo;s been more than three years now that I&rsquo;ve been doing DevSecOps. In this job I use a fair amount of SAST, and overall I find them a bit lame. They surface the most obvious vulns, sure, but the moment things get a little twisted, it&rsquo;s really not great.</p>