Sonar announced a significant advancement of its Clean Code offering – developers can now automatically discover and fix code security issues arising from interactions between user source code and third-party, open-source libraries. Referred to as deeper SAST, the new advanced detection addresses issues that traditional SAST tools miss by not following the flow within library code.
Source: Help Net Security