https://code-radar.dev/blog/ Local SAST, AI-generated code review, MCP agent context, and GitHub Actions SARIF gates for developer-first security workflows. en Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/review-ai-generated-code-before-pr/ https://code-radar.dev/blog/review-ai-generated-code-before-pr/ Use a local security scan loop, a finding-first prompt, and a CI gate to keep agent output reviewable. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/local-sast-vs-cloud-sast/ https://code-radar.dev/blog/local-sast-vs-cloud-sast/ A practical breakdown of when local-first scanning is enough and when deeper hosted analysis belongs in the pipeline. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/github-actions-security-scanner/ https://code-radar.dev/blog/github-actions-security-scanner/ Turn scanner output into PR annotations, SARIF alerts, GitHub code scanning evidence, and deterministic merge thresholds. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/mcp-code-review-workflow/ https://code-radar.dev/blog/mcp-code-review-workflow/ Give agents structured local findings instead of asking them to infer risk from raw terminal output. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/semgrep-alternative-local-sast/ https://code-radar.dev/blog/semgrep-alternative-local-sast/ Compare local SAST workflow, agent handoff, GitHub Actions SARIF output, reports, and operational surface before choosing a scanner. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/sast-vs-sca/ https://code-radar.dev/blog/sast-vs-sca/ Compare static application security testing with software composition analysis, and decide which findings should block local review or CI. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/sast-vs-code-scanning/ https://code-radar.dev/blog/sast-vs-code-scanning/ Understand the difference between scanner engines, SARIF output, GitHub code scanning alerts, and pull-request gates. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/add-sarif-to-github-actions/ https://code-radar.dev/blog/add-sarif-to-github-actions/ Generate SARIF from a scanner, upload it in GitHub Actions, and keep pull-request security gates deterministic. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/best-sast-tools-for-developers/ https://code-radar.dev/blog/best-sast-tools-for-developers/ Evaluate local feedback speed, source-upload boundaries, SARIF support, agent workflow, and PR gates before choosing a developer-first SAST tool. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/best-code-security-tools-for-startups/ https://code-radar.dev/blog/best-code-security-tools-for-startups/ Compare code security tools by setup cost, local-first scanning, CI evidence, dependency coverage, and whether a small team can operate them. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/best-semgrep-alternatives/ https://code-radar.dev/blog/best-semgrep-alternatives/ Compare Semgrep alternatives by local SAST workflow, SARIF output, MCP agent handoff, dependency checks, and PR gates. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/best-sonarqube-alternatives/ https://code-radar.dev/blog/best-sonarqube-alternatives/ Compare SonarQube alternatives by local setup, developer feedback, code-health signal, security findings, reports, and CI gates. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/typescript-security-scanner/ https://code-radar.dev/blog/typescript-security-scanner/ Use local SAST, secret scanning, dependency checks, and code-health findings to review TypeScript changes before a pull request. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/python-security-scanner-cli/ https://code-radar.dev/blog/python-security-scanner-cli/ Run a local Python security scanner CLI for source findings, dependency risk, secrets, and review evidence without uploading source code. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/go-security-scanner/ https://code-radar.dev/blog/go-security-scanner/ Scan Go repositories locally and in GitHub Actions for source-level risk, dependency advisories, secrets, and code-health findings. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/rust-dependency-scanner/ https://code-radar.dev/blog/rust-dependency-scanner/ Use Radar to scan Rust lockfiles and surface dependency risk beside local SAST, secrets, and code-health findings. Wed, 01 Jul 2026 00:00:00 GMT https://code-radar.dev/blog/javascript-sast-tool/ https://code-radar.dev/blog/javascript-sast-tool/ Run JavaScript SAST, secret scanning, dependency checks, and SARIF report generation before generated or risky code reaches review. Wed, 01 Jul 2026 00:00:00 GMT