<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Code Review on Devops Monk</title><link>https://devops-monk.com/tags/code-review/</link><description>Recent content in Code Review on Devops Monk</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 26 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://devops-monk.com/tags/code-review/index.xml" rel="self" type="application/rss+xml"/><item><title>Claude Code as a Security Scanner: Beyond Pattern Matching</title><link>https://devops-monk.com/2026/04/claude-code-security-scanner/</link><pubDate>Sun, 26 Apr 2026 00:00:00 +0000</pubDate><guid>https://devops-monk.com/2026/04/claude-code-security-scanner/</guid><description>Tools like ESLint, Semgrep, and Bandit catch what they are programmed to find: known patterns, common injection strings, deprecated API calls. They are fast, reliable, and deterministic. They are also blind to anything that requires understanding what your code is supposed to do.
Claude Code operates differently. It reads code the way a human security researcher would — tracing data flows across files, understanding business logic, and reasoning about what could go wrong given the specific context of your application.</description></item></channel></rss>