Checkmarx Reviews

opencode Reviews

Checkmarx mentions (4)

• Troubleshooting Broken Function Level Authorization

  Tools like OWASP ZAP are excellent for dynamic application security testing, while SonarQube and Checkmarx specialize in static security testing. These tools integrate seamlessly into your pipeline, automating checks and enabling you to catch and resolve issues quickly - before they ever make it to production. - Source: dev.to / 10 months ago

• Penetration Testing for API Security: Protecting Digital Gateways

  Tools like SonarQube, Checkmarx, or Snyk can automate parts of this process by scanning for known vulnerability patterns. While white box testing may not reflect real-world attack scenarios (as attackers rarely access source code), it provides the most thorough assessment of security posture. - Source: dev.to / about 1 year ago

• A Guide to DevSecOps with API Gateway

  Automate security testing: Use tools such as OWASP ZAP, SonarQube, or Checkmarx to automate security testing. This will help you identify security issues early in the development process and reduce the risk of vulnerabilities being introduced into your code. - Source: dev.to / over 3 years ago

• 11 Top DevSecOps Tools

  Application Security (AppSec) is the forte of Checkmarx, which is an award-winning AppSec Testing tool that integrates security policies into the DevOps workflow and ensures security across the application lifecycle. Checkmarx scans all your code and provides actionable insights for critical vulnerabilities. Checkmarx also offers developer-friendly AppSec training that makes the transition to DevSecOps more... - Source: dev.to / over 4 years ago

opencode mentions (67)

• ZCode: Claude Code from the Makers of GLM

  Https://opencode.ai/ OpenCode was the first agent harness I used, and I have always like it. You can configure a wide variety of providers, but it's open source and has a number of core contributors. The other opinionated option is Pi (the Pi agent harness). This is a great lightweight option and also supports a number of providers. You can also use local model servers. - Source: Hacker News / 1 day ago

• AI for Less Popular Programming Languages

  OpenCode with GLM 5.2 wrote custom Emacs Lisp to pinpoint within the file where the missing or extra bracket could be. It rewrote the custom code to check various parts of the file. Each of those is a tool use and many, many tokens burned. The next step is to turn those custom scripts written by the AI agent into a tool to speed up the process, or a skill that shows how to use other tools to speed up the process. - Source: dev.to / 4 days ago

• How to Run Reliable Local LLM Agents on an RTX 3090: A Benchmark (5 Models, Priced in Watts)

  I gave GLM-4.5-Air (106B, open weights) 12 coding tasks through opencode on my RTX 3090. It scored 0% — never edited a single file. - Source: dev.to / 6 days ago

• The head chef model of AI collaboration

  Set up your stations. I work in two Ghostty terminals. The left side is for planning and viewing, the right for synchronous agents running through OpenCode. - Source: dev.to / 14 days ago

• Testing GLM-5.2 on OpenCode: I'm impressed!

  If you want to try it yourself: grab OpenCode, point it at OpenRouter, select GLM 5.2, and give it a real task instead of a benchmark. The z.ai docs have the rest of the details. - Source: dev.to / 15 days ago