# scanner

Published articles for scanner.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## TRA:CE is a portable scanner concept for recording color, material, and surface finish

DevFeed: [TRA:CE is a portable scanner concept for recording color, material, and surface finish](<https://devfeed.tech/articles/phone-photos-of-materials-lie-this-scanner-reads-the-surface-itself-31394.md>)

Original publisher: [Read original article](<https://www.yankodesign.com/2026/09/16/phone-photos-of-materials-lie-this-scanner-reads-the-surface-itself/>)

Author: JC Torres

Published: 2026-09-16T13:20:57Z

Content type: article

Language: en

Sources: [Yanko Design](<https://devfeed.tech/sources/yanko-design.md>)

Topics: [color](<https://devfeed.tech/topics/color.md>), [Tool](<https://devfeed.tech/topics/tool.md>), [dataset](<https://devfeed.tech/topics/dataset.md>), [App](<https://devfeed.tech/topics/app.md>)

Tags: [capture](<https://devfeed.tech/tags/capture.md>), [cmf](<https://devfeed.tech/tags/cmf.md>), [color](<https://devfeed.tech/tags/color.md>), [concept-designs](<https://devfeed.tech/tags/concept-designs.md>), [design](<https://devfeed.tech/tags/design.md>), [gadgets](<https://devfeed.tech/tags/gadgets.md>), [gadgets-product-design-technology-cmf-concept-designs-scanner](<https://devfeed.tech/tags/gadgets-product-design-technology-cmf-concept-designs-scanner.md>), [product-design](<https://devfeed.tech/tags/product-design.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [technology](<https://devfeed.tech/tags/technology.md>)

### AI overview

The article presents TRA:CE, a pocket-sized CMF scanner concept that reads color, material, texture, and finish directly from surfaces. Scans are saved in a companion app with color values, reference matches, grain, pore size, and gloss information.

### Source excerpt

Phone Photos of Materials Lie, This Scanner Reads the Surface Itself Every designer has a folder full of phone photos that were supposed to capture a specific shade of oak or a particular matte finish, and...

## RBP Tracker: Counting the CVE IDs the CVE List Cannot See

DevFeed: [RBP Tracker: Counting the CVE IDs the CVE List Cannot See](<https://devfeed.tech/articles/rbp-tracker-counting-the-cve-ids-the-cve-list-cannot-see-27481.md>)

Original publisher: [Read original article](<https://jerrygamblin.com/2026/09/14/rbp-tracker-counting-the-cve-ids-the-cve-list-cannot-see/>)

Author: jgamblin

Published: 2026-09-14T14:16:42Z

Content type: article

Language: en

Sources: [Jerry Gamblin](<https://devfeed.tech/sources/jerry-gamblin.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [NVD](<https://devfeed.tech/topics/nvd.md>), [API](<https://devfeed.tech/topics/api.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-list](<https://devfeed.tech/tags/cve-list.md>), [data](<https://devfeed.tech/tags/data.md>), [ids](<https://devfeed.tech/tags/ids.md>), [list](<https://devfeed.tech/tags/list.md>), [nvd](<https://devfeed.tech/tags/nvd.md>), [report](<https://devfeed.tech/tags/report.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [source](<https://devfeed.tech/tags/source.md>), [state](<https://devfeed.tech/tags/state.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

### AI overview

The article examines a corrected RogoLabs tracker for Reserved but Public CVE IDs. It explains that the CVE Services API returns 404 for reserved IDs, while a separate unauthenticated endpoint reveals their RESERVED state. The tracker lists IDs from public advisory feeds and describes how reserved records are absent from the bulk CVE List until publication.

### Source excerpt

A new RogoLabs site lists Reserved but Public CVE IDs: 2,315 of them on September 14, drawn from 17 public advisory feeds, refreshed every six hours, and held a week before they appear. The first version of this tracker reported that none of the CVE IDs it found existed in the CVE List, in any ... Read more

## Beyond the Merge: Enforcing Policy Before the Terraform Apply

DevFeed: [Beyond the Merge: Enforcing Policy Before the Terraform Apply](<https://devfeed.tech/articles/beyond-the-merge-enforcing-policy-before-the-terraform-apply-17660.md>)

Original publisher: [Read original article](<https://nirmata.com/2026/09/03/beyond-the-merge-enforcing-policy-before-the-terraform-apply/>)

Author: Sachin Agarwal

Published: 2026-09-03T17:25:32Z

Content type: article

Language: en

Sources: [Nirmata](<https://devfeed.tech/sources/nirmata.md>)

Topics: [iac-security](<https://devfeed.tech/topics/iac-security.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [Security](<https://devfeed.tech/topics/security.md>), [Kyverno](<https://devfeed.tech/topics/kyverno.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>)

Tags: [ci](<https://devfeed.tech/tags/ci.md>), [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [kyverno](<https://devfeed.tech/tags/kyverno.md>), [other](<https://devfeed.tech/tags/other.md>), [policy-as-code](<https://devfeed.tech/tags/policy-as-code.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [shift-left](<https://devfeed.tech/tags/shift-left.md>), [terraform](<https://devfeed.tech/tags/terraform.md>)

### AI overview

The article describes using Nirmata Control and its nctl CLI to evaluate Terraform plans against policy-as-code rules before deployment. It presents pre-apply CI checks for detecting infrastructure misconfigurations, including unrestricted ingress, missing S3 public-access blocking, wildcard IAM resources, and missing VPC deployment.

### Source excerpt

Run Terraform security scanning on the plan, not the live account. nctl checks 4 critical misconfigs in CI, with exceptions scoped to one resource.

## Your alt text passes automated checks. That doesn't mean it's any good.

DevFeed: [Your alt text passes automated checks. That doesn't mean it's any good.](<https://devfeed.tech/articles/your-alt-text-passes-automated-checks-that-doesn-t-mean-it-s-any-good-19853.md>)

Original publisher: [Read original article](<https://github.blog/engineering/user-experience/your-alt-text-passes-automated-checks-that-doesnt-mean-its-any-good/>)

Author: Taarik Ashenafi

Published: 2026-08-24T20:56:32Z

Content type: article

Language: en

Sources: [GitHub](<https://devfeed.tech/sources/github.md>)

Topics: [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [alt text](<https://devfeed.tech/topics/alt-text.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>)

Tags: [accessibility](<https://devfeed.tech/tags/accessibility.md>), [alt-text](<https://devfeed.tech/tags/alt-text.md>), [automation](<https://devfeed.tech/tags/automation.md>), [blog](<https://devfeed.tech/tags/blog.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [plugin](<https://devfeed.tech/tags/plugin.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [user-experience](<https://devfeed.tech/tags/user-experience.md>)

### AI overview

This article explains a GitHub Accessibility Scanner plugin for evaluating alt text. It distinguishes deterministic checks that automated tools can prove from contextual quality judgments that may require a model and image context.

### Source excerpt

We built a plugin for the GitHub Accessibility Scanner to make sure your alt text is actually accessible. Here's how it works. The post Your alt text passes automated checks. That doesn't mean it's any good. appeared first on The GitHub Blog.

## Harness Announces AI-Assisted Security Capabilities for Vulnerability Scanning, Triage, Remediation, and Response

DevFeed: [Harness Announces AI-Assisted Security Capabilities for Vulnerability Scanning, Triage, Remediation, and Response](<https://devfeed.tech/articles/harness-enables-security-at-machine-speed-13401.md>)

Original publisher: [Read original article](<https://www.harness.io/blog/harness-announces-capabilities-that-enable-security-at-machine-speed>)

Author: Rahul Sood

Published: 2026-08-19T00:00:00Z

Content type: release

Language: en

Sources: [Harness Blog](<https://devfeed.tech/sources/harness-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [automated](<https://devfeed.tech/tags/automated.md>), [blog](<https://devfeed.tech/tags/blog.md>), [report](<https://devfeed.tech/tags/report.md>), [sast](<https://devfeed.tech/tags/sast.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Harness announces security capabilities using AI SAST, automated vulnerability triage, remediation, zero-day response, and virtual patching. The article discusses how LLM-based scanners can increase vulnerability findings while introducing false positives, latency, and cost concerns.

### Source excerpt

Harness enables security at machine speed with AI SAST, automated vulnerability triage, remediation, zero-day response, and virtual patching. | Blog

## Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up

DevFeed: [Chainguard Libraries for Java is now GA; CVE remediation beta available for sign up](<https://devfeed.tech/articles/chainguard-libraries-for-java-is-now-ga-cve-remediation-beta-available-for-sign-up-12966.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-libraries-for-java-is-now-ga-and-includes-cve-remediation>)

Published: 2026-06-23T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard libraries](<https://devfeed.tech/topics/chainguard-libraries.md>), [Java](<https://devfeed.tech/topics/java.md>), [Spring Boot](<https://devfeed.tech/topics/spring-boot.md>), [Security](<https://devfeed.tech/topics/security.md>), [Back end](<https://devfeed.tech/topics/backend.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [chainguard-libraries-for-java](<https://devfeed.tech/tags/chainguard-libraries-for-java.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [java](<https://devfeed.tech/tags/java.md>), [java-packages](<https://devfeed.tech/tags/java-packages.md>), [java-spring](<https://devfeed.tech/tags/java-spring.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [zero-cve-packages](<https://devfeed.tech/tags/zero-cve-packages.md>)

### AI overview

Chainguard Libraries for Java is generally available, and its CVE remediation capability is available in beta. The article describes backported fixes for critical and high-severity CVEs across the Spring Boot ecosystem, helping teams manage risks in pinned or legacy Java dependencies while planning upgrades.

### Source excerpt

Chainguard Libraries for Java is now GA, delivering CVE-remediated dependencies with SBOMs, provenance, and scanner-recognized fixes.

## Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run

DevFeed: [Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run](<https://devfeed.tech/articles/introducing-the-chainguard-cinc-auditor-image-stig-scanning-for-chainguard-containers-ready-to-run-13123.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/introducing-the-chainguard-cinc-auditor-image-stig-scanning-for-chainguard-containers-ready-to-run>)

Published: 2026-06-18T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [anchore](<https://devfeed.tech/topics/anchore.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [anchore](<https://devfeed.tech/tags/anchore.md>), [anchore-enterprise](<https://devfeed.tech/tags/anchore-enterprise.md>), [apache](<https://devfeed.tech/tags/apache.md>), [built-from-source](<https://devfeed.tech/tags/built-from-source.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [cinc-auditor](<https://devfeed.tech/tags/cinc-auditor.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [pipeline](<https://devfeed.tech/tags/pipeline.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [stig](<https://devfeed.tech/tags/stig.md>), [stigs](<https://devfeed.tech/tags/stigs.md>)

### AI overview

Chainguard introduces a ready-to-run cinc-auditor container image for STIG scanning of Chainguard Containers. The image includes a maintained GPOS SRG InSpec profile, removes separate profile and dependency setup, and supports production compliance pipelines, including FedRAMP workflows.

### Source excerpt

Chainguard launches a ready-to-run STIG scanner with a built-in GPOS SRG InSpec profile, simplifying compliance scans for containers and FedRAMP workflows.

## The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"

DevFeed: [The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"](<https://devfeed.tech/articles/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware-13252.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware>)

Published: 2026-06-09T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Code](<https://devfeed.tech/topics/code.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [npm](<https://devfeed.tech/topics/npm.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [greyware](<https://devfeed.tech/tags/greyware.md>), [greyware-scanner](<https://devfeed.tech/tags/greyware-scanner.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [malware-scanner](<https://devfeed.tech/tags/malware-scanner.md>), [npm](<https://devfeed.tech/tags/npm.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [packages](<https://devfeed.tech/tags/packages.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [source](<https://devfeed.tech/tags/source.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>)

### AI overview

Chainguard has introduced a source code scanner that detects traditional malware and "greyware," harmful packages that may perform actions such as credential theft, command interception, API key harvesting, or persistent remote access. The scanner currently protects npm packages, scans more than 100,000 packages daily, and has blocked more than 52,000 packages identified as malware or greyware.

### Source excerpt

Chainguard's new scanner blocks malware and 'greyware' before it reaches developers, protecting 100,000+ packages daily across open source ecosystems.

## Supply chain attacks expose weaknesses in open-source software trust

DevFeed: [Supply chain attacks expose weaknesses in open-source software trust](<https://devfeed.tech/articles/open-source-died-in-march-it-just-doesn-t-know-it-yet-13195.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/open-source-died-in-march-it-just-doesnt-know-it-yet>)

Published: 2026-04-09T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Open Source](<https://devfeed.tech/topics/open-source.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [npm](<https://devfeed.tech/topics/npm.md>)

Tags: [ai-coding](<https://devfeed.tech/tags/ai-coding.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [code](<https://devfeed.tech/tags/code.md>), [dependency](<https://devfeed.tech/tags/dependency.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [npm](<https://devfeed.tech/tags/npm.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [oss](<https://devfeed.tech/tags/oss.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [solarwinds](<https://devfeed.tech/tags/solarwinds.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>), [trust](<https://devfeed.tech/tags/trust.md>), [vibe-coding](<https://devfeed.tech/tags/vibe-coding.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>)

### AI overview

This opinion article argues that a series of open-source supply chain attacks exposed a broken trust model. It discusses attacks involving npm and PyPI packages, stolen credentials, malicious contributors, and the limits of vulnerability scanning and hardening.

### Source excerpt

Five supply chain attacks in 12 days exposed a broken trust model. Learn why scanning and hardening fail, and why trusting the source is the only fix.

## EU chat-control proposal would require AI scanning of photos and links on messaging services

DevFeed: [EU chat-control proposal would require AI scanning of photos and links on messaging services](<https://devfeed.tech/articles/chatcontrol-of-de-amerikanen-onze-whatsapp-foto-s-willen-melden-bij-europol-36290.md>)

Original publisher: [Read original article](<https://berthub.eu/articles/posts/chatcontrol-weer-terug/>)

Published: 2025-08-19T08:30:00Z

Content type: opinion

Language: nl

Sources: [Bert Hubert's writings](<https://devfeed.tech/sources/bert-hubert-s-writings.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Meta](<https://devfeed.tech/topics/meta.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [eu](<https://devfeed.tech/tags/eu.md>), [facebook](<https://devfeed.tech/tags/facebook.md>), [meta](<https://devfeed.tech/tags/meta.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [whatsapp](<https://devfeed.tech/tags/whatsapp.md>)

### AI overview

The article criticizes a renewed EU proposal, led by Denmark, that would require services such as WhatsApp and Signal to use AI to inspect users' photos and links. It says suspected material could be sent to a new EU Centre, Europol, and local police, and argues that the proposal would create extensive surveillance.

### Source excerpt

In het kort: onder leiding van Denemarken pleiten veel EU-lidstaten er (weer) voor om WhatsApp/Signal/etc te dwingen al onze foto's en links te inspecteren met behulp van AI. Als de AI ook maar enige "twijfel" heeft of iets kinderpornografie zou kunnen zijn, worden je foto, locatie, telefoonnummer en andere gegevens doorgestuurd naar een nieuw "EU Centrum", en daarna naar Europol en de lokale politie. Wat er daarna gebeurt staat niet precies in het voorstel, maar je vakantie op Cyprus zou zomaar kunnen eindigen met een gesprek op het lokale politiebureau om je foto's uit te leggen.

## HTTP/1.1 Must Die: What This Means for AppSec Leadership

DevFeed: [HTTP/1.1 Must Die: What This Means for AppSec Leadership](<https://devfeed.tech/articles/http-1-1-must-die-what-this-means-for-appsec-leadership-7727.md>)

Original publisher: [Read original article](<https://portswigger.net/blog/http-1-1-must-die-what-this-means-for-appsec-leadership>)

Author: Andrzej Matykiewicz

Published: 2025-08-06T22:23:49Z

Content type: article

Language: en

Sources: [PortSwigger Blog](<https://devfeed.tech/sources/portswigger-blog.md>)

Topics: [HTTP](<https://devfeed.tech/topics/http.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [architectures](<https://devfeed.tech/tags/architectures.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [audit](<https://devfeed.tech/tags/audit.md>), [black-hat](<https://devfeed.tech/tags/black-hat.md>), [defcon](<https://devfeed.tech/tags/defcon.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [http](<https://devfeed.tech/tags/http.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [testing](<https://devfeed.tech/tags/testing.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

PortSwigger research presented at Black Hat USA and DEFCON 2025 argues that HTTP/1.1 request smuggling remains a widespread protocol-level threat. Parsing ambiguities in modern chains of interconnected systems can enable session hijacking, cache poisoning, data leakage, and site takeover. The article argues that individual patches are insufficient and recommends upstream HTTP/2 as a stronger long-term solution while organizations audit their exposure to desync vulnerabilities.

### Source excerpt

At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef

## Snyk Supercharges API Discovery with New Akamai Integration

DevFeed: [Snyk Supercharges API Discovery with New Akamai Integration](<https://devfeed.tech/articles/snyk-supercharges-api-discovery-with-new-akamai-integration-8110.md>)

Original publisher: [Read original article](<https://snyk.io/blog/snyk-akamai-integration-api-discovery-testing/>)

Author: Nuno Loureiro

Published: 2025-08-06T04:00:00Z

Content type: news

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [snyk-platform](<https://devfeed.tech/topics/snyk-platform.md>), [Security](<https://devfeed.tech/topics/security.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [akamai](<https://devfeed.tech/tags/akamai.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [api](<https://devfeed.tech/tags/api.md>), [api-discovery](<https://devfeed.tech/tags/api-discovery.md>), [api-security](<https://devfeed.tech/tags/api-security.md>), [api-testing](<https://devfeed.tech/tags/api-testing.md>), [apis](<https://devfeed.tech/tags/apis.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [co-created](<https://devfeed.tech/tags/co-created.md>), [efficiency](<https://devfeed.tech/tags/efficiency.md>), [executive](<https://devfeed.tech/tags/executive.md>), [integration](<https://devfeed.tech/tags/integration.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [openapi-specification](<https://devfeed.tech/tags/openapi-specification.md>), [platform](<https://devfeed.tech/tags/platform.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [testing](<https://devfeed.tech/tags/testing.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

Snyk and Akamai announced an integration that automates API discovery and schema ingestion. Akamai API inventories and schemas are added to Snyk API & Web so teams can turn discovered APIs into scannable targets with a single click, improving API security testing coverage and efficiency.

### Source excerpt

Snyk and Akamai partner to streamline API security. This integration automates API discovery and schema ingestion from Akamai to power Snyk's DAST engine, boosting scan coverage and efficiency.

## Trusted Open Source Means Compatibility: New Integration with Orca Security

DevFeed: [Trusted Open Source Means Compatibility: New Integration with Orca Security](<https://devfeed.tech/articles/trusted-open-source-means-compatibility-new-integration-with-orca-security-13298.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/trusted-open-source-means-compatibility-new-integration-with-orca-security>)

Published: 2025-06-17T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [orca security](<https://devfeed.tech/topics/orca-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Containers](<https://devfeed.tech/topics/containers.md>)

Tags: [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-os](<https://devfeed.tech/tags/chainguard-os.md>), [compatibility](<https://devfeed.tech/tags/compatibility.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [open-source-scanners](<https://devfeed.tech/tags/open-source-scanners.md>), [orca-security](<https://devfeed.tech/tags/orca-security.md>), [partnership](<https://devfeed.tech/tags/partnership.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Chainguard announces an integration with Orca Security that adds visibility for Chainguard OS and Chainguard Containers images in the Orca Platform. The integration exposes image metadata, scans images and installed packages for vulnerabilities against Chainguard Security Advisories, and provides additional security context for remediation.

### Source excerpt

Chainguard now has an integration with Orca Security. Discover more about our new partnership.

## ML Kit Document Scanner in action

DevFeed: [ML Kit Document Scanner in action](<https://devfeed.tech/articles/ml-kit-document-scanner-in-action-25944.md>)

Original publisher: [Read original article](<https://medium.com/google-developer-experts/ml-kit-document-scanner-in-action-1c3a49ef5a33?source=rss-cbfc736ddcd3------2>)

Author: Julien Salvi

Published: 2024-04-15T09:53:27Z

Content type: tutorial

Language: en

Sources: [Stories by Julien Salvi on Medium](<https://devfeed.tech/sources/stories-by-julien-salvi-on-medium.md>)

Topics: [ML Kit](<https://devfeed.tech/topics/ml-kit.md>), [Android](<https://devfeed.tech/topics/android.md>), [API](<https://devfeed.tech/topics/api.md>), [pdf](<https://devfeed.tech/topics/pdf.md>), [Google](<https://devfeed.tech/topics/google.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [android-development](<https://devfeed.tech/tags/android-development.md>), [api](<https://devfeed.tech/tags/api.md>), [code](<https://devfeed.tech/tags/code.md>), [gradle](<https://devfeed.tech/tags/gradle.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [ml-kit](<https://devfeed.tech/tags/ml-kit.md>), [ml-kit-android](<https://devfeed.tech/tags/ml-kit-android.md>), [pdf](<https://devfeed.tech/tags/pdf.md>), [scanner](<https://devfeed.tech/tags/scanner.md>)

### AI overview

This tutorial explores ML Kit Document Scanner for Android and demonstrates integrating it into a messaging feature. The library digitizes physical documents, supports automatic capture, detection, cropping, rotation, image editing, and optional gallery import, with the scan flow delivered through Play Services.

### Source excerpt

Recently, ML Kit released a new library to digitize physical documents directly from your Android application. ML Kit Document Scanner allows the users to easily scan documents with maximum controls and minimum code integration. During my time at Aircall, I took some time to explore and integrate the library to build an Android-exclusive feature for the messaging scope. Discovering the library ML Document Scanner is the newborn of the ML Kit family. It allows users to convert physical documents into digital formats. The library now brings this feature to any apps with many capabilities like applying filters, cleaning the image, removing shadows and many more. The entire scan flow is delivered by the Play Services so no camera permission is mandatory and the library size (~300KB download size increase) has a low impact in your app (the ML models are also managed by the Play Services). So let's dig into the what the library offers. The ML Kit Document Scanner offers key capabilities like a high-quality user interface that ensures consistency across Android applications. With automatic capture and document detection, the users can effortlessly scan documents, while accurate edge detection ensures optimal cropping results. Additionally, automatic rotation detection ensures that scanned documents are presented upright. For developers seeking customization options, the Document Scanner API offers flexibility. You can set a limit on the number of pages scanned and enable or disable the capability to import from the photo gallery. Moreover, there are 3 editing modes available: basic editing capabilities, editing with image filters or editing with ML-enabled image cleaning capabilities (erase stains, fingers...). You will find a complete overview of the library with the official documentation. ML Kit | Google for Developers Build with Document ScannerCrafting the feature It's now time to craft our new feature with ML Kit Document Scanner. Here, we want to give the ability to t

## Grype Adds OpenVEX Support for Vulnerability Analysis

DevFeed: [Grype Adds OpenVEX Support for Vulnerability Analysis](<https://devfeed.tech/articles/vexed-then-grype-about-it-chainguard-and-anchore-announce-grype-supports-openvex-13311.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/vexed-then-grype-about-it-chainguard-and-anchore-announce-grype-supports-openvex>)

Published: 2023-10-10T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [grype](<https://devfeed.tech/topics/grype.md>), [openvex](<https://devfeed.tech/topics/openvex.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [anchore](<https://devfeed.tech/topics/anchore.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [anchore](<https://devfeed.tech/tags/anchore.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cybersecurity-and-infrastructure-security-agency](<https://devfeed.tech/tags/cybersecurity-and-infrastructure-security-agency.md>), [grype](<https://devfeed.tech/tags/grype.md>), [openssf](<https://devfeed.tech/tags/openssf.md>), [openvex](<https://devfeed.tech/tags/openvex.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [software-bill-of-materials](<https://devfeed.tech/tags/software-bill-of-materials.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [vex](<https://devfeed.tech/tags/vex.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>)

### AI overview

Grype, Anchore's open-source vulnerability scanner, now supports OpenVEX, a machine-readable standard for vulnerability analysis. The article explains how this can provide context for vulnerabilities and help reduce false positives and vulnerability-management effort.

### Source excerpt

Open source vulnerability scanner Grype has added support for OpenVEX, making software supply chain security easier. Learn how to implement it today.

## Stemming the tide of false positive vulnerabilities

DevFeed: [Stemming the tide of false positive vulnerabilities](<https://devfeed.tech/articles/stemming-the-tide-of-false-positive-vulnerabilities-13238.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/stemming-the-tide-of-false-positive-vulnerabilities>)

Published: 2023-09-11T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [cve](<https://devfeed.tech/tags/cve.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [false-postive](<https://devfeed.tech/tags/false-postive.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>)

### AI overview

Chainguard Labs presents tooling intended to identify false-positive vulnerability reports, including cases where a vulnerable library is not exploitable. The article describes research using vulnerable symbols to help prioritize vulnerabilities that require attention.

### Source excerpt

Tackle false positive vulnerabilities with Chainguard's innovative tooling to prioritize genuine threats and secure your software.

## Fuzzy CVEs, tarfiles, and untrusted input

DevFeed: [Fuzzy CVEs, tarfiles, and untrusted input](<https://devfeed.tech/articles/fuzzy-cves-tarfiles-and-untrusted-input-13056.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/fuzzy-cves-tarfiles-and-untrusted-input>)

Published: 2023-07-27T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [common vulnerabilities and exposures](<https://devfeed.tech/topics/common-vulnerabilities-and-exposures.md>), [Python](<https://devfeed.tech/topics/python.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [NVD](<https://devfeed.tech/topics/nvd.md>)

Tags: [common-vulnerabilities-and-exposures](<https://devfeed.tech/tags/common-vulnerabilities-and-exposures.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [go](<https://devfeed.tech/tags/go.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [nvd](<https://devfeed.tech/tags/nvd.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [python](<https://devfeed.tech/tags/python.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>), [vulnerability-scanning](<https://devfeed.tech/tags/vulnerability-scanning.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

This article examines CVE-2007-4559 in Python's tarfile module, why the 15-year-old issue may still appear in security scanners, and why its classification as a vulnerability is disputed. It discusses CVE processes, NVD entries, open-source maintainer constraints, and the risks of extracting untrusted tarfile inputs.

### Source excerpt

Navigate fuzzy CVEs, tarfiles, and untrusted input with Chainguard, paving the way to secure coding practices.

## How Chainguard fixes vulnerabilities before they're detected

DevFeed: [How Chainguard fixes vulnerabilities before they're detected](<https://devfeed.tech/articles/how-chainguard-fixes-vulnerabilities-before-they-re-detected-13083.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/how-chainguard-fixes-vulnerabilities-before-theyre-detected>)

Published: 2023-07-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Go](<https://devfeed.tech/topics/go.md>), [Security](<https://devfeed.tech/topics/security.md>), [Software](<https://devfeed.tech/topics/software.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [releases](<https://devfeed.tech/topics/releases.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [OAI-PMH](<https://devfeed.tech/topics/oai-pmh.md>)

Tags: [automated](<https://devfeed.tech/tags/automated.md>), [base-images](<https://devfeed.tech/tags/base-images.md>), [build](<https://devfeed.tech/tags/build.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [cve](<https://devfeed.tech/tags/cve.md>), [go](<https://devfeed.tech/tags/go.md>), [http](<https://devfeed.tech/tags/http.md>), [image-cves](<https://devfeed.tech/tags/image-cves.md>), [library](<https://devfeed.tech/tags/library.md>), [net](<https://devfeed.tech/tags/net.md>), [repo](<https://devfeed.tech/tags/repo.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanning](<https://devfeed.tech/tags/vulnerability-scanning.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard describes how Wolfi rapidly remediated CVE-2023-29406 in Go by automating upstream release monitoring, package rebuilding, testing, review, and release. The article explains that the fix reached Wolfi-packaged Go applications before vulnerability scanners had the information needed to detect it, and that the updated Go image and dependent packages were rebuilt to include the fix.

### Source excerpt

Uncover Chainguard's strategic vulnerability remediation, enhancing your software's security posture.

## A purl of wisdom on SBOMs and vulnerabilities

DevFeed: [A purl of wisdom on SBOMs and vulnerabilities](<https://devfeed.tech/articles/a-purl-of-wisdom-on-sboms-and-vulnerabilities-12860.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/a-purl-of-wisdom-on-sboms-and-vulnerabilities>)

Published: 2023-02-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [component](<https://devfeed.tech/tags/component.md>), [components](<https://devfeed.tech/tags/components.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [false-positive](<https://devfeed.tech/tags/false-positive.md>), [nvd](<https://devfeed.tech/tags/nvd.md>), [package-url](<https://devfeed.tech/tags/package-url.md>), [purl](<https://devfeed.tech/tags/purl.md>), [sbom](<https://devfeed.tech/tags/sbom.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [software-bill-of-materials](<https://devfeed.tech/tags/software-bill-of-materials.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-data](<https://devfeed.tech/tags/vulnerability-data.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>), [vulnerability-scanning](<https://devfeed.tech/tags/vulnerability-scanning.md>)

### AI overview

The article argues that Software Bill of Materials (SBOMs) would be more useful if the National Vulnerability Database (NVD) widely adopted the package URL (purl) naming scheme. Analysis of real scanner false positives suggests that purl information could reduce the false positive rate by more than 50%.

### Source excerpt

SBOMs could be a lot more useful if the NVD implemented widespread usage of the purl naming scheme, which could reduce the false positive rate by over 50%.

## Ideas and Solutions for Advent of Code 2021 in Kotlin -- Part 4/4

DevFeed: [Ideas and Solutions for Advent of Code 2021 in Kotlin -- Part 4/4](<https://devfeed.tech/articles/ideas-and-solutions-for-advent-of-code-2021-in-kotlin-part-4-4-24736.md>)

Original publisher: [Read original article](<https://medium.com/xorum-io/ideas-and-solutions-for-advent-of-code-2021-in-kotlin-part-4-4-75c207692bdb?source=rss----92bb7980cc9f---4>)

Author: Yev Kanivets

Published: 2021-12-26T14:39:41Z

Content type: tutorial

Language: en

Sources: [xorum.io - Medium](<https://devfeed.tech/sources/xorum-io-medium.md>)

Topics: [Advent of Code](<https://devfeed.tech/topics/advent-of-code.md>), [Kotlin](<https://devfeed.tech/topics/kotlin.md>), [3D](<https://devfeed.tech/topics/3d.md>), [pixel](<https://devfeed.tech/topics/pixel.md>)

Tags: [3d](<https://devfeed.tech/tags/3d.md>), [advent-of-code](<https://devfeed.tech/tags/advent-of-code.md>), [algorithms](<https://devfeed.tech/tags/algorithms.md>), [array](<https://devfeed.tech/tags/array.md>), [beacon](<https://devfeed.tech/tags/beacon.md>), [competitive-programming](<https://devfeed.tech/tags/competitive-programming.md>), [data-structures](<https://devfeed.tech/tags/data-structures.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [pixel](<https://devfeed.tech/tags/pixel.md>), [points](<https://devfeed.tech/tags/points.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [solutions](<https://devfeed.tech/tags/solutions.md>)

### AI overview

A Kotlin walkthrough of Advent of Code 2021 tasks 19 and 20. It explains matching rotated point sets in 3D space using beacon intersections, then enhancing an image represented as a 2D pixel array while accounting for infinite padding and changing background values.

### Source excerpt

Ideas and Solutions for Advent of Code 2021 in Kotlin -- Part 4/4 The final week of Advent of Code was, obviously, the most challenging one. To be honest I was close to being happy with just a silver star multiple times. But at the end, tenacity made the difference. 50 stars are mine this year 🌟 Ideas and Solutions for tasks 1 to 6 can be found here, for tasks 7 to 12 -- here, for tasks 13 to 18 -- here. Day 19: Beacon Scanner We are provided with several sets of points in 3D space. Those points are rotated differently in each set, so we don't know how X, Y, and Z coordinates are aligned between sets. Our goal is to merge all those sets into a single group by matching points (sub-task one) and find the most significant distance between coordinate origins after they are matched. Here is the complete task. This is an exciting task! I've initially learned about this idea from The Three-Body Problem book, which introduced the concept of locating any star in the Universe by the distances from a few nearest stars -- in our case, "a few" means 12. Think about it as a star fingerprint ;) So to match the sets of points in 3D space, we need: check all combinations of rotations in three dimensions (in our task, the step is 90 degrees, so there are 48 combinations) for the whole set assume that each pair of points from the first set and the second set is an intersection by adjusting all points to that pair check how many adjusted points intersect between the two sets if there are more than 12 intersections, voilá -- the sets are matched The embedded Kotlin's functions like intersect, map, and mapNotNull make the solution, even for such a complex task, elegant. Day 20: Trench Map This image-enhancing task provides us with the initial photo (2D array of black and white pixels), and enhancing guidance (1D array). Enhancing happens in steps, where for each pixel, we found its enhanced value as a result of a combination of itself + all eight adjacent pixels. Here is the complete task. We

## Practical parsing with Flex and Bison

DevFeed: [Practical parsing with Flex and Bison](<https://devfeed.tech/articles/practical-parsing-with-flex-and-bison-21491.md>)

Original publisher: [Read original article](<https://begriffs.com/posts/2021-11-28-practical-parsing.html>)

Published: 2021-11-28T00:00:00Z

Content type: tutorial

Language: en

Sources: [Joe Nelson](<https://devfeed.tech/sources/joe-nelson.md>)

Topics: [Parsing](<https://devfeed.tech/topics/parsing.md>), [Parser](<https://devfeed.tech/topics/parser.md>), [C](<https://devfeed.tech/topics/c.md>), [Regular expression](<https://devfeed.tech/topics/regular-expression.md>), [make](<https://devfeed.tech/topics/make.md>)

Tags: [build-system](<https://devfeed.tech/tags/build-system.md>), [c](<https://devfeed.tech/tags/c.md>), [compiler](<https://devfeed.tech/tags/compiler.md>), [lexer](<https://devfeed.tech/tags/lexer.md>), [make](<https://devfeed.tech/tags/make.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [scanner](<https://devfeed.tech/tags/scanner.md>)

### AI overview

A practical guide to parsing with Lex, Yacc, Flex, and Bison. It explains how lexing divides input into meaningful chunks, how parsing groups those chunks according to recursive rules, and how parser generators can be integrated into build systems and used for real data formats.

### Source excerpt

2021-11-28 Although parsing is often described from the perspective of writing a compiler, there are many common smaller tasks where it's useful. Reading file formats, talking over the network, creating shells, and analyzing source code are all easier using a robust parser. By taking time to learn general-purpose parsing tools, you can go beyond fragile homemade solutions, and inflexible third-party libraries. We'll cover Lex and Yacc in this guide because they are mature and portable.

## Kotlin Mumbai: Increase Your Product Quality Through Accessibility

DevFeed: [Kotlin Mumbai: Increase Your Product Quality Through Accessibility](<https://devfeed.tech/articles/kotlin-mumbai-increase-your-product-quality-through-accessibility-28384.md>)

Original publisher: [Read original article](<https://siddroid.com/post/post-july-kotlin-mumbai-2020/>)

Author: Siddhesh Patil

Published: 2020-07-25T15:28:04Z

Content type: article

Language: en

Sources: [Sid Patil - Android Engineer and Kotlin Advocate](<https://devfeed.tech/sources/sid-patil-android-engineer-and-kotlin-advocate.md>)

Topics: [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [Android](<https://devfeed.tech/topics/android.md>), [Mobile](<https://devfeed.tech/topics/mobile.md>), [Usability](<https://devfeed.tech/topics/usability.md>), [User experience (UX)](<https://devfeed.tech/topics/ux.md>)

Tags: [accessibility](<https://devfeed.tech/tags/accessibility.md>), [accessibility-practices-on-android](<https://devfeed.tech/tags/accessibility-practices-on-android.md>), [android](<https://devfeed.tech/tags/android.md>), [best-android-developer-groups-in-india](<https://devfeed.tech/tags/best-android-developer-groups-in-india.md>), [best-practices-android](<https://devfeed.tech/tags/best-practices-android.md>), [developer-communities-in-mumbai](<https://devfeed.tech/tags/developer-communities-in-mumbai.md>), [google-developer-experts](<https://devfeed.tech/tags/google-developer-experts.md>), [kotlin-user-group-mumbai](<https://devfeed.tech/tags/kotlin-user-group-mumbai.md>), [kug](<https://devfeed.tech/tags/kug.md>), [meetup](<https://devfeed.tech/tags/meetup.md>), [mobile](<https://devfeed.tech/tags/mobile.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [talks](<https://devfeed.tech/tags/talks.md>), [usability](<https://devfeed.tech/tags/usability.md>), [victoria-gonda-meetup-engineer](<https://devfeed.tech/tags/victoria-gonda-meetup-engineer.md>)

### AI overview

This article recaps a Kotlin Mumbai talk by Victoria Gonda about improving app accessibility. It covers accessibility techniques, usability, regression prevention, and the use of an accessibility scanner, with a link to the recorded talk.

### Source excerpt

Senior Android Engineer at Meetup, Victoria Gonda talks about accessibility on apps and how to make it better!

## Writing a Fuzzy Receipt Parser in Python

DevFeed: [Writing a Fuzzy Receipt Parser in Python](<https://devfeed.tech/articles/writing-a-fuzzy-receipt-parser-in-python-27933.md>)

Original publisher: [Read original article](<https://tech.trivago.com/post/2015-10-06-python_receipt_parser/>)

Author: Matthias Endler

Published: 2015-10-06T00:00:00Z

Content type: tutorial

Language: en

Sources: [Trivago](<https://devfeed.tech/sources/trivago.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [Parser](<https://devfeed.tech/topics/parser.md>), [Hackathon](<https://devfeed.tech/topics/hackathon.md>), [CSV](<https://devfeed.tech/topics/csv.md>), [elasticsearch](<https://devfeed.tech/topics/elasticsearch.md>), [kibana](<https://devfeed.tech/topics/kibana.md>)

Tags: [csv](<https://devfeed.tech/tags/csv.md>), [elasticsearch](<https://devfeed.tech/tags/elasticsearch.md>), [engineering-culture](<https://devfeed.tech/tags/engineering-culture.md>), [hackathon](<https://devfeed.tech/tags/hackathon.md>), [kibana](<https://devfeed.tech/tags/kibana.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [python](<https://devfeed.tech/tags/python.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [usb](<https://devfeed.tech/tags/usb.md>)

### AI overview

A Python hackathon project explores building a fuzzy receipt parser for household expense tracking. The tool is intended to scan receipts, identify the shop, date, and total with more than 90% precision, and export the results to CSV for later analysis.

### Source excerpt

Last weekend, the Python Hackathon Düsseldorf took place at trivago's office. Although we were only five people we had a lot of fun. I took the chance to brush up my Python skills a little bit. Also I wanted to scratch an itch that was bugging me for a long time: our housekeeping book.

## Générer le script DDL programmatiquement avec Hibernate 4.x

DevFeed: [Générer le script DDL programmatiquement avec Hibernate 4.x](<https://devfeed.tech/articles/generer-le-script-ddl-programmatiquement-avec-hibernate-4-x-26061.md>)

Original publisher: [Read original article](<https://blog.arkey.fr/2015/08/07/generer-le-script-ddl-programmatiquement-avec-hibernate-4-x/>)

Author: brice.dutheil@gmail.com (Brice Dutheil)

Published: 2015-08-07T15:26:51Z

Content type: tutorial

Language: fr

Sources: [The Coffee Workshop](<https://devfeed.tech/sources/the-coffee-workshop.md>)

Topics: [Code](<https://devfeed.tech/topics/code.md>), [SQL](<https://devfeed.tech/topics/sql.md>), [Framework](<https://devfeed.tech/topics/framework.md>), [modules](<https://devfeed.tech/topics/modules.md>)

Tags: [classes](<https://devfeed.tech/tags/classes.md>), [code](<https://devfeed.tech/tags/code.md>), [framework](<https://devfeed.tech/tags/framework.md>), [hibernate](<https://devfeed.tech/tags/hibernate.md>), [jpa](<https://devfeed.tech/tags/jpa.md>), [reflections](<https://devfeed.tech/tags/reflections.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [sql](<https://devfeed.tech/tags/sql.md>), [structure](<https://devfeed.tech/tags/structure.md>)

### AI overview

This tutorial presents programmatic generation of DDL scripts for applications using Hibernate 4.x with non-trivial configurations. It explains passing annotated classes and packages explicitly and using Reflections to scan JPA-annotated classes when hibernate4-maven-plugin is insufficient.

### Source excerpt

Si par hasard votre base donnée est gérée par un véritable DBA, donc avec des scripts SQL. Mais que vous utilisez hibernate pour mapper les tables avec une configuration non triviale, modules bien découpés, package annotés, etc.... Les utilitaires comme hibernate4-maven-plugin ne suffisent plus.

[Next page](<https://devfeed.tech/tags/scanner.md?cursor=WyIyMDE1LTA4LTA3VDE1OjI2OjUxKzAwOjAwIiwgImFjNThkYTllLWVmYzYtNGZhNS04ODE2LWQwODY2MTAwMjUxNSJd>)