in reply to ZARN - security code analysis for perl

Discipulus, thanks for asking this ... made me realise I didn't have anything on this important topic at my List of Security References ... so, after a quick google, I've just added a new "Static Program Analysis" section there, starting with your node of course, along with:

The only static code analysis tool I've personally used on Perl code is the most excellent Perl::Critic, though I don't recall using it for Security analysis.

Further cool references on static code security analysis welcome.

  • Comment on Re: ZARN - security code analysis for perl