Comment on AISLE Discovers 38 CVEs in OpenEMR Healthcare SoftwareparentComments−webXL4moYes. Isn't this something code review catches? :)−happytoexplain4moSometimes, but not nearly as reliably as a static analyzer. But I'm assuming the unstated point you are sarcastically implying is "you don't need SonarQube" - maybe you're trying to say something else.−gchamonlive4moWebXL makes no sense, because that's comparing oranges to apples.−positron264moPresuming there is an infinite pool of programmers who tirelessly work for a low price?−gchamonlive4moI'm really curious what's your line of thinking here. Could you elaborate?
Comments
Yes. Isn't this something code review catches? :)
Sometimes, but not nearly as reliably as a static analyzer. But I'm assuming the unstated point you are sarcastically implying is "you don't need SonarQube" - maybe you're trying to say something else.
WebXL makes no sense, because that's comparing oranges to apples.
Presuming there is an infinite pool of programmers who tirelessly work for a low price?
I'm really curious what's your line of thinking here. Could you elaborate?