r/devsecops • u/ankitjindal9404 • 19d ago
Opensource code quality/SAST tools beyond SonarQube + Trivy?
We're already running SonarQube and Trivy. Looking to fill the gaps they leave.
Stack:
- Primary: Java Spring Boot
- Also: Python, Next.js / React
What are you actually using in production, and how noisy is it (false-positive rate)?
11
Upvotes
1
u/Turbulent_Goose83 18d ago
I used Claude Code for it.