All Content tagged with Amazon CodeGuru Security

We enabled Amazon Inspector's code repository scanning (CodeGuru Security detectors) on a PHP 8.4 / CodeIgniter 4 application. Of 455 ACTIVE CODE_VULNERABILITY findings, the large majority appear to b...

We recently started using Amazon Inspector code security scanning on our repositories (Node.js/TypeScript codebase) and wanted to share some honest feedback, plus ask a question about suppression rule...

I am considering using either CodeGuru Security or CodeGuru Reviewer to review my Github PRs. What are the exact differences between the two? I see [here](https://docs.aws.amazon.com/codeguru/latest/s...

Hi all, I would like to use CodeGuru in my codepipeline, and I am trying to test it if it can find out that I am using some library that has vulnerabilities or has been deprecated. I started with a ...

Hi! We are trying out CodeGuru Security. However, as expected with any tools like these, there are some false positives. How can I flag/ignore those false critical finds so we can use the github actio...

I've recently been trying out the preview of CodeGuru Security for static code analysis (we use GitHub so the integration is very nice). I'm pretty impressed with how it works so far, but have one na...

Good morning team, The security team mandates scanning our CDK code for security measures to avoid deploying potentially harmful code. Do you have recommendations or best practices for tools that f...