Dan Sellers posted my rant on code scanning tools on his Security for Canadian Developers Blog : --- START --- Information managers, developers and testers commonly make the mistake of seeing code scanning tools as replacement for security QA processes.