Static-Analysis on Tokenisehttps://tokenise.rosvetic.com/tags/static-analysis/Recent content in Static-Analysis on TokeniseHugoen-gbFri, 06 Nov 2026 07:03:00 +0000Turn every defect you find in agent code into a Semgrep rule, so the same mistake can't come backhttps://tokenise.rosvetic.com/posts/semgrep-rule-for-every-agent-defect/Fri, 06 Nov 2026 07:03:00 +0000https://tokenise.rosvetic.com/posts/semgrep-rule-for-every-agent-defect/<p>A reviewer leaves the same comment on the third agent-written pull request this month: &ldquo;this builds the query from a string&rdquo;. The agent fixes it, the comment gets resolved, and the lesson lives in a closed thread. Next sprint a different session, with no memory of the thread, writes the same query the same way.</p>