If you have code chock full of bugs (hand written, or LLM generated?) then I guess any tool that helps find them is good. I find that traditional static analysi

If you have code chock full of bugs (hand written, or LLM generated?) then I guess any tool that helps find them is good. I find that traditional static analysis tools like Fortify are next to useless because of the low signal to noise ratio - flagging things that aren’t errors or vulnerabilities just because someone decided that certain standard library calls should be flagged etc. I wouldn’t be praising an LLM for it’s voluminous output unless it is doing a much better job of finding actual bugs, and if the code really is that buggy then it might be worth asking why!