Replying to @jonny@neuromatch.social
@jonny In all seriousness, actual grown up SAST & DAST testing like Coverity and so on is pretty unglamorous. I actually had an item in my graph algorithms notes to look at Jorgensen et al.'s "Software Testing: A Craftsman's Approach" precisely to unpack all the complexity therein