[edgyquant]

There are already companies that exist to audit the security of codebases programmatically so this will just be part of the flow

[rsynnott]

Spoiler: they're basically snake oil. Or at least they are grossly insufficient.

[edgyquant]

For now they are insufficient, I wouldn’t call them snake oil they solve a real problem with real solutions and will only become more accurate